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iMt  9mm  mmmm  m mmh»  •#  • mm  mmrnm  ftrinMr  **m 
«H«tei  mmmn  m mm  mum  tmmmm  mm p*  mmmm  Mmum 
m hhmm  «m  turn  F-wwm.nm  m mtm  mm. 


« 


ZttlltZ  ««« 


Tilt  «t«1  ticMcil  rapart  iKMMtt  tit  Him  I tutitccl  activity  Hr  tta 
iptlfkatld  Hr  HMT  IlHlW  CMlwt  (F2MU-IA-C-1PP4)  mtM  U tH 
Htlflp  HwHf  CM  (HC).  H»  iH#  PM  cmHkM  Ip  tH  Pavlay  Wtl- 
tory  Alrplaaa  lavalapaaat,  Hlartci  iHHilip  «Hr  tH  tpaiartlH  af  tH 
Air  Fare#  Avlaalct  UHitHry  aai  la  tappart  af  tfcatr  ifHrl  ta  pacify  a 
cmHHH  avlaalct  tyaaaa  Pail pa  Hr  tta  MT  aircraft. 


IH  prtaary  aHfactfca  af  tMt  iHH  mm  ta  apacify  tH  aaflaara  far  tta 
latapratai  Alpttol  Avlaalct  fir  tta  Ml  (IPHKT)  aircraft.  TAa  UHT  % fi- 
lm ftatallaa  Aaflalttaa  it  caaclftatf  fa  a tarlat  af  Aacaaaats  at  tlaa  la 
Flpyt  I.  Hi  aaflaara  tpaclffcatlaac  (aatai  ty  tta  tala  Hast  af  Flpra  1 
rapraaaat  aaa  afaaaat  af  tHa  MKT  apactflcattaa. 


ilflcatlaa  af 


(«Tt)  to  tactlltoto 


Aatarafaatlaa  af  MKT  aaflaara  raplraaaais 
lavalaa  a racaaflpratiaa  appraact  Mr  MKT 
Raalyaa  tot  IPKKT  Spttoa  toritora/Saftaara  I 


HvIh 


Flaa  Mpptlai 


Flaar  3 


4.2.1.  4.2.2 


*.»•). 


i m mm  a— pit—  Op  m 


tt—  H MPtHlly  at  mi 
M.  It.  (nMooi  t.«»l 


f.  Cm  l Mitt—  of  —Ml  C-14  4ott—  it  corrootlp  topi— ootot  la 
Ha  TC-14  —a  m— < to  fOcft  ttoto  tyitta  oof  lot  t too  ottO  ra—ct  to 
pOpatcol  alto  com  trot  oto.  lauttaa  of  Ha— ra,  —4  apat—  —Ip. 

Io  o—1 1 cot  too  of  oat— pttoo  4 oOovo,  (t  —a  roc  a —trot  t—t  cortato  otaatoo 
Uakt  coo  14  oot  too  4o—  Mcooao  of  aofe—ooaot  Oolottoo  of  oot— tea  o— t— — t 
fr—  too  o— Ip— it  Hat  otto— t i aoOoo—oot  wpPoto  to  too  otaatoo  acooorto 
aocO  aa  OM'a.  lo  tOoao  attoattooo  too  toaOa  —a  occoopH—  Op  *1  tor— to 
toe— t— m or  oolttof . 


ftporo  4 tlluatrotoa  tOo  prop r—  tost  floo  It—  to— ria  tip  —4  roaol 
tOo  apoctftcottoo  of  IWNST  aoft— ro.  TOo  a— porttop  apt  too  pplptlt  —a 
4 1 roc  tot  spoctf  tcalfy  —a  oatoOltaOtop  aoft—  i— otr— f . T—  a— on 
focota  of  iota  pOaao  of  propr—  octtvttp  opro  poraoot.  TO—  ooro  — Milo— 


c.  Mpaat fa  CUM*  *1^IB  MHMn'. 

4.  mmii  c n « - vptMa  • mt  mum  Mm, 

n«*t  N9«  Mplkattaaa  (WWM  NIIMmk, 

If  Jm.  n. 

#.  ipriu  run*  «p«Ht  - ms  inw«m  imm  iMMitvt. 
nm-ftc-iwi  <K-mi  m-mi-mm*. 

NiMam,  a»  mt.  ft. 

ItMta*  OM  MW  lTw>'.  lapt.  n. 

t.t  tr— rr  mcmw! 

Ttea  fal  Mat  ImwU  art  mlkalli  m r<n  rafavaara  Ivawti  «v  Mi 
MM  activity  KkmmI  la  tteta  r^rt. 

a.  Mr  lav  IMa  tattapaM  SpalfkittM  Mr  MIS  Mt  CaaVral  latarfaca 
Mall.  Tjppa  M.  (M-MI-MMMS)  fraltataary.  Met*  It. 

I.  liMrfici  Caalval  Mcaaa  • Mtitw  MmtMi  Sapwa:  Hl*W 
Caalvata  vai  tHalan/laMrfeca  MM  MHcittw  SvMari 
(Sfe  M*M),  Nlaiary,  If  MM  If. 
c.  Mtfttaa  MhaMMali  vat  tl«a*ajr»  latarfaca  CM  Ml* Ml). 
MMatary,  It  MM  If. 

4.  Cvalralt  aal  Hactraatct  Mr  MUST,  traft  an- 

a.  MKT  Stfaal  lit!  (Ml),  MMaMry. 
f . KUf  Svatti  Caalval  Mir  Mat  (M  »M*S4I  Matte  4), 
f Mr.  fl. 

f.  laMgratat  ttfttat  Mteatei  Mr  a MtM  IM  fraataart. 


f 


aatlyiH  taai  at 
m if  faaaatlMt 


aaalftit 


if  nil 


I.  A 


VMt  tact  taa  Mil 
Ha)  dM  iaa  ra 
TMt  ffean  if  pra 
taa  tftttlact  «aap 
AMIatttaa  la 


aaaM#  af  Mi 
i acttvttf  it  a 
Via  first  flat 


lift!* 


taa  aaaaatt 


> aaalftlt.  flf 
aa  acttvttf. 

Ha)  ta  Mas 


4af1atttaa  af 


Iflc  caaractarlttict  af  tia  tlfaal 


I ft  la 
lal  aatf 


pravfAM  laltial  varlflaatlaa  af 


Mactlaaal  parttttaataf 


1.1.1  1ft Ma  AHtatttaa 

A AUIM  Mftatttaa  af  tAa  IMKT  ifMa  k 
tc  liMlfjr  all  taa  aaaMaaaftaflnra  fat  art 
tftMa  aasttartaf,  aai  taa  fltgft  caatral  a* 
Tia  avtaatc  aaaaart,  aircraft  tftMa  aaattar 
lata  tia  I AMT  tftMa  aai  Am  aa  ataraM  < 
tia  iatlc  aatlfa  af  tia  atytul  AaMafct  laA 
far  I (MAT  tia  tftMa  lift  Mai  If  aaaalttt  af 
af  Uaa  rtflacaaila  Mtt  (lATt). 


aircraft 


aaMaaat,  ate..  It  laMyatai 
tactara  tMt  it  tlallar  ta 
Ma  1ft mb  (tAIS)  aatlfa. 
MHaalay  Maatltf  aai  t«pat 


I 


■ V* 

ril 

t>w^>j 

! ; j] 

: I 1 

•MyV&iajMfl 

ril«T  0(U  (QUIHKNT  IVTOCWCT 


calatto  rculti  captrti.  MnMItr  rrtalMKy  act wr%  Mm  c«r 

mittv  H MtaH  frw  Ut  ar  ttm  ItffartM  lifiaw  Um.  In  am  ciwi. 
tlm  an  «1m  toUrfaca  mi  pnctNil  to  Mpmtt  r— to  untaili  Mi 
itutM  pracattart  Mi  tM  rnaltt  cMparai.  In  tilt  My,  ivlMkt  taparattoa 
hy  fMCttMCl  pKtltlwiai  U MlnttfMi.  I*  • MMHfeBt  ilffpTMt  My. 
ratoatoaey  m i MpmttM  H prti IM  In  tit  caatralt  Mi  itaptoyt  mm.  Tto 
alUt*c#(Ut  toocttoat  ary  aapiritai  Mtt  fMCttotolly  m i pfeytfcally. 

Ftyrt  • Mm  fefett  Mr  »mU  taratailt  art  wtM  to  totorfact  tit  crm 
catrtli  Mi  iltplayt  vtfefe  tot  UMMT  tyttM.  totkt  tfeat  tM  CMtralt  *rr 
iltplayt  art  locatto  In  tM  lautiatt  Flf0t  Met  pawl  am 

Mi  n«fM  Met  avfaaki  toy.  Tim  lauttoi  Mrt  cfett m to  Itoft  tto  feMtoi 
tM  aaail  ritofeMMtt  ,a  tM  flltot  Met  Mi  to  laitoll  at  MCfe  if  tM 
avtoatet  torMart  t«  tM  caatnyllii  My  ante  Tfeartfara.  Mparatlaa  af  pitot- 
copilot  toettaai  rpMlraa  tM  Mt  tf  tM  rMto  toralaalt  par  area.  It  tfetoli 
to  aatai  tfeat  tM  rnato  toralaalt  1«  tto  fl tffet  Met  avlMtct  toy  alaa  lator 
faca  wttt  «tMr  tMMrt.  to  attala  mi  Mm  flyaifelllty  aator  tavaral  fallart 
cMiltlMt.  all  af  tto  craa  caatraW  aM  iltplayt  Mrt  tatorffeeai  to  toti 
mato  tontolt.  TMt  fearMIrai  ratoaiaat  latorfaca  pratocat  Mtito  aaefe 


• UMt  lUfi* 


ItM  •#  pH*  m fnttlM. 


tmost  nipt 


« triple 
ilflMl  | 


r IC-M  I 
: flffM 
if  Mi  < 


Mr  m«t  tMp  «i  w MM  Itlly  tM 

fit  ilrcnft.  IMt  afrtrtft  fmtm 
it  Http  tlfCS)  wtIMitat  Mrat 
I Mtp  Mr  (Mi  tMfr  Mb  flip! 


mmtr  MM  MhM  Mi  attIMM  taMrattn,  DCS 
Mi  CtMTlM  tMMlt  Wwrnmtm  M tM  fllpt  CHM1 
Hit  tM  tpctflc  IrMrMet  tlptlt. 


CMtrrl  if  tM  DCS  It  ttlll 
M M "as  ict«M*  Mtlt. 


I M ItMlf  MM  tMartaf  i 


ll«i  lltt  if  ttfMlt 


TM  prMri  aMlfttcal  Mil 

mnm  it « 

MMMTtMi  •#  MM  M Mr  Mrrlt  Carpratta*  (Mtnet  wUr  lUflt-tt-C 
III*).  TM  OBSM  MM  Mm  caaMMt  MMtlai  cMracMrlttlct  af  U»  tip 
Tilt  MM  MM  Mt  pMMi  Mr  Mlt  prtpM  M rt#1«t  tM  tptlMc  aplp 
lltt  MM  M MMpli  it  tM  tMMl  Htt  It  «I«M  Hi  TMli  ).  TM  e 


il«M  lltt  It 
flcattaa  Mr  IM 
tM  MflaltMa  if 

MM  «1M 


M allaa 


naoi 


a, 


r-  t ■MBTfll 

IfvEjH 


it. 


till 


•ffKil  #f  atrtMM  »f%— ri  pgrtltlMlf  tdMi,  MtMl  if  Ml  tfWHtln, 
Mi  Ui  tapKt  yii  t«4»  m %r*Hm  pmAmomu.  MfM  il  Mnrim 
tM  rtMlti  •#  tH  flMl  mlfifi  Mi  Uri  if  pi  re —I  if  «ttlliM 

ftjrfttM  Aft  CM  M MM.  CMMMIW  pwn  cimMIHi  lilltt 

Hr  tftcrrnil  Mi  Ml  tMffk  Mi  iMttnil  ttUHtocM  HT ft  Alts  ifeM 
«•  F«f*t  II  it  IM  mx Ml  MttttMltM  if  IM  t Atm  M««Im  prttMMn  li 
IMM  If  Mfl  1 1 llwMi  CUMlItl  (AM  AppMila  • Mr  MMMMr  tWftM 
PM  Attest*  «M). 


A MliftM  AtftCstftlM  M IM  ftjrfttM  Mlftlft  It  «I«M  l«  App Mila  A 


i.i  mum  mmumm.  Minis 

npMi  14  twrtmr  Mill*  M prsprM  Im*  f»M  KMClHci  MU  Ut  IMMT 
MftftlM/Mif  IftMil  Milyftlt.  *M  ilfttlSCt  MM  Ml  iMMtlpUi  MIA 
mpH  H Itflfti  upHMMt  M Ui  IMMT  ftjrfttM  mUti.  TH|  m: 
i.  WfttlM  mmImI  nprtMMt. 

A.  NitlMl  rfpilMMt. 


1.1.1  WfttlM  •paMlml  laprtfiMlt 

TM  fMMMMil  MMitlMil  CMitiMitlMft  Hr  IMMT  in  ivtMlct  mAimxi, 
Mm  nMnwtt,  Mi  MttlM  rtltMtliif.  tum  ium  mi  imitu  *iu 
Ui  MJsctlvv  if  Wflstsp  tpKlflc  nfiMf  nprtMMft  Hr  IPMKT  Tit  Hy 
AMT  MMitlMil  nfilnMtft  tfWcttsf  Ui  IMMT  MftlfP  in  «t  ftiltsst: 
i.  HrHm Mfi  * IM  MtM  «»  Mr  CM 

4.  fiUn  • CPI.  JVIM.  TA/Tf  Mi  Atm  Cm. 

C.  WfttlM  MltMMHf  • MMUU  WfttlM  tftftMttftl  (MMIIItp 

1.1.1. 1 f*r*MMK« 

Il  Ut  MM  MftMPi  IMt  i ICC  Ml mr  CIP  Hr  CAM  It  M AMT  ipMftllMil 
MjMUrt  Mi  i MW IrMMt  4M  Ulft  Ita#  t*U  4 VMMrlMt  pHMNli 
cmMIIIUm  if  ijflMft  CAM  SKMslastlM  tcMMft 


tfitftl*  m tnaitata  tot art  mg  cMMrtai  cni.  tit  SK/W/I*  i»rmi  (s 
ttt  «t  1 fitly  CMiM«U  fm  mm mH%  1M  attar  CP  Tit  MS/ 1*  wtealM- 
tlaa,  feMNr,  will  it  raiHaatlt  It  tit  IK  mg  m flat  aw  tai  titrtfart 
it  a prtaa  fravti  cttMtntlw.  It  tltitr  cttt  tit  tlftifkMCt  tf  tit 
rijalr— tf  It  tit  aactttlty  to  tattfrata  attar a 1 aatarata  cattail  itltt  lata 
• caaataat  cataiHttr  It  aatt  tit  pritiKi. 

3 2.1.2  Patart  it^IrtHBtt 

Pvtvra  ratafroatats  tf  VS.  JT11S.  TA/TF.  aat  irta  iivtfattaa  art  all  artat 
caatitattt  far  faclatta*  vital*  tit  MMT  catttll  Itltt.  Tail#  S itticattt 
tit  faactlaail  lattrfactt  titt  tilt  it  rtaitrti  it  lattfratt  titM  cattail  Itltt 
•Hit*  MRT. 


raau  s 

FtfTfM  OtCMTIMU  I MUST  ItTOfACfS 


vs 

mas 

TA/TP 

irta  tovtyatttn 


Iptarftct  vlti 
Kvlptfta.  PCS.  CM 
•ivlfattaa.  A/C  tytlaat.  CM 
tavlfatla*.  PCS.  CM 
Kvlfitiaa.  PCS.  CM 


I*  atcA  cttt  iNtttratlta  tf  tlrtt  ftactttaal  arttt  It  raptra* 

3.?.  1.3  I*tafr«tai  Mvlfatta*  Syttaa 

•atttf  at  tit  prtctilaf  caatttaratlaat  tf  Paramt  3.2. 1.1  aat  3 2.1.2,  a* 
fntayratatf  toviyatia*  tjrttaa  for  tMWT  itt  itta  ptttalatttf  mg  It  tHavr  1* 
Plfvrt  IS.  Tit  ittlc  navifattaaal  fvactlaaal  tttit  art: 
a.  tMtpwi  tf  ttm  Mvlftttta  tjrtua  (Pvactltat). 
i.  Artctttlaf  tf  Mv1«atlaa  tata 
c.  Outlay  tf  Ktlfttlta  laftfutia. 

4.  Stttrlav  tifatlt  to  Pllfit  mg  Arapvltla*  tytlaat. 


«.  c Utf  mtciit  itpih. 


Specific  «OUpUtdttdnol  UUt 
I.  Jwp  calculation* 

FI  igbt  pleneing 

Nerijontel  end  vortical  navigation 


c. 


(Hutu  MU 


PMUM* 


Mignt  director 

Mvk| 

•ell  ivttc 


3.7  14  MUtlai  Ael  lability 


••liability  of  the  I04KST  tyit*  Is  of  prfcne  importance  to  WS’  operation 
because  Of  tU  centralization  of  mission  functions  wl thtr  three  nissior  pn> 
cessors  It  It  beyond  the  scooo  Of  tMl  Study  tc  Investigate  hardnire 
reliability  to  ostabltsb  hardware  design  requirement*  Software  requtraneet* 
can.  however,  be  osUbllsboi  based  u#or  the  premise  that  a processor  failure 
Is  a statistical  event  and  tbe  probability  of  occurrence  Is  sufficiently  la roe 
to  Mirra nt  soft sure  design  consideration  Also,  it  is  reasonable  to  eipecr 
that  tbe  ATS’  nlstloe  capability  should  not  rest  or  having  all  three  pro 
e assort  operational  To  facll  itate  develoenert  of  software  reguirMonts  to 

support  nissior  oporatior  in  the  event  of  hardware  failures  the  fol loving 
operational  crltoria  has  been  developed 

a Tbe  I OAKS T Software  design  shall  naintaln  a winumat  nissior  essential 
capability  with  only  a single  nissior  processor  operational 

b The  IMKST  Software  design  shall  provide  an  invariant  systen  cepe 

billty  (raduod)  subsequent  to  a processor  failure  and  that  capability 
shall  bo  consistent  vith  the  requ trnaents  of  a above 

c Tbe  IOdltS’  Software  dost**  shall  naintaln  function!  redundancy 
al theater,  dual  !IS/V0i.  etc  ) 


1 


1,2  1.4. 1 «rim  Mltttw  tssaotlal  Capability 

Air  fere*  tU44«t  aaP  tha  PAC  AOC  have  MW  review!  altb  mpMt  to  the 
■IniMi  miotul  MMftUltjr  for  t*W  INST  Flyer*  1C  UkvUtM 

til*  establish*!  alntaea  alts  loo  function  ytrtirt  tha  various  Mite  INST  alsslon* 
Each  atiitaa  faaetlaa  taPlcate!  repulse*  IINNST  iofta ara  support  Tabl*  C 
taaarlm  taa  atotaa  atulan  capability  incluilay  flifbt  so  fat  y Consistent 
altb  tba  above  state!  crltaria  (Poraymaph  3 2 1 4. a)  tbit  capability  shall  ba 
aalntataeP  altb  only  a ilnfla  itule*  processor  operational  Tha  itataa 
fOKtlan  la  TabU  C have  baaa  onpeaPeP  subtly  (natal  by  asterisk)  over  tha 
iPeatlfleP  a.ssloa  functions  of  Flyvr*  1C  to  iaclaPa  an  laPlcatlaa  of  avionics 
apulpaaat  status.  display  of  coat rot  surfaces.  aaP  display  of  aayln*  pa  ran*  tars 


THU  C 

WtbMBI  HI  SSI  OP  CSSCPTIAL  CAPAPIllTf 

Pin  law  P1»s  taa  Fattens 
nifbt  Safety 


SAC/IN 


4a  Par 
CMP 

Fl  i#>t  Safatv  Fuactioas 

Caapaal cat leas  * Coatret/Olsplay 
Display  of: 

Air  Aata  (alt.  alrspeaP.  ate  ) 
AttltwPe 
MaoPIny 
Aata  af  turn 
AaPar  altltuPa 
ILS/PQi  (control /Pi  splay) 

Ground  pr*j*1atty  earn lay 

31 


ociaco 


Aftaaki  apatpMat  1UU1* 

C«Kf«l  Mrfau  #lt#Ujr* 

Capiat  pPUtolir  Htflijr* 

• Htitimml  fWKttMH  tot  t Mat  1 fit*  «•  ft para  II. 

J.M.4.J  SftVto  toCtaftparattaa 

I af  Unyiffc  1.2. 1.4  ifKlftM  Uwt  apaa  fatlara  «f  a atutM 
pmttMr  tM  rataltaat  tUtiw  cipattltty  tto  11  to  tatopaatoat  af  «Md  pra- 
cnur  fp 41  Ml.  Tto  nttwU  toMN  tilt  milfto  it  tlaply  to  alatiu  «• 
imriiat  tutor  fact  Mmm>  tto  era*  tto  tto  IIMT  tjrttaa.  If  It  it  attaato 
ttot  Ittt  tf  t pracattar  Mil  rttilt  lit  tato  Ittt  af  alula*  iiMlIUty 
pattoliUf  tto  rataltaat  IMMT  capattl tty  caalt  to  praettwr  topaatoat  tto 
tto  craa  aaa  aacMaa  tatarftca  aaaltf  to  a f toe  tto  accaeitaply.  la  tpactftc 
torn  af  taftatra  tto  1 art  at  rtfilraatt  cal  It  tor  tto  IMMT  tyttaa  ta  ra- 
caaf tfara  tttalf  ta  a taaw  caaftparattaa  af  aa  latt  capattltty  ttoa  ttot 
at  ft  aaa  ay  Taala  a.  tail  a fatal  to  fall  art  af  aaa  ar  taa  pmauart. 


Tati  a 7 praattot  a vc  total  a far  racaaftparattaa  far  tto  MIT  far  a tfcraa. 
taa  ato  aaa  pracattar  aartoara  caaftparattaa. 

Ttot  I 7 

IMMT  CCM IMMT IM/tl COM ICMMTIM  SCMCMK.I 


MttCSSM  MOUSM 

sum  at  sum  mhim 
uMapt  mam. 

i i 


I 2 


2 2 

2 1 

1 (to  totttaa  LaaacP) 


) prat at tar  caaftparattaa  (fall  I 
capa»t1tty) 


La* 


fa  tiara  racaaflpara 
a ttap  1 (aatai* 
a ttop  2 (craa  aaatla)* 


I attk  2 prat at tar  caaftparattaa 

fa  tiara  racaaftaara 
a ttop  1 (aatai* 


II 


* siat  » • teti  i’i— n ppi  it  mot**  WMtM  (tMatiai  capMtiitr  - 

1 pfWMur  active. 

Slat  I • Hitt  VMM  recaeft curat t«e  Mat  tM—r  capMtlttp 
3. 2. 1.4.3  Faacttaaal  KMtMqr 

Tba  I OMIT  ijrttat  It  ta  tala  tala  faactloMl  naaMcy  af  laMwi  vat*  t«M 
MrMtw  it  ipad  fleetly  prtrIM  M lacttMa  evlaefct  tjrtMt  ra  Motility 
IO0ST  laftaara  Pntfa  Meal*  aat  attract  frta  MU  atjactfot  Stollerly  ttt 
1BMIT  taftwara  Mall  atlatei*  Ma  traPftlatal  foKtiaael  tataratlaa  of  tit* 
tfaat  iitplayt  M pilot  ati  copilot  la  traaatart  aircraft,  rifart  if 
Hint  tra  ttt  tMt  t>11  Mitt  I far  ttt  MT  fllfrt  tefaty  fvactlaat.  It  Ma 
caee  of  Ma  fllftt  caatral  tyttat  (rtS)  lapott  a t fatal  talactlat  pnmi  it 
watt  M it  1 act  Ma  tatt  tlftalt  far  pilot  art  cat  Hot  4 Up  lay.  StapU 
fwtct fatal  taparatlaa  till  ratal t apaa  fallow  of  oaa  fllfPt  Caatral  Snt* 
(fCS)  cHoaael. 


If 


1.1.2  fOKttCMl  •tUlrwMl 

fit  fMKtlMl  iNlfiU  »f  M IMMT  ijnt«  mi  tftmtM  t— rfi  MtmriMtlM 
•f  crm  cMMl/<UfU|  aai  tMtjtUM  Im«u*  r««Hr«MU  m tlM  1WBT  i*ft- 
■ara,  TlM  MMljrtU  Ml  Mm4  mm  MM  fttflM  UM rl«  rt^TMcM  fey 
Mi  Mi  tMMrliM  la  (MpMlU  Am  if  flyart  19.  A mJm  tail  maclatM 
•H*  tM  fMctUMl  Malytlt  mi  Mm  faaarattaa  af  apa*atlaaa1  mmmc#  lUfran 
Wl'i)  (im  (tlM*  II  af  till  rapart)  Tim  9S9*t  ianrai  at  a ItuipliaM 
tacfeaiMfe  u lyitaMtlully  ravlaa  mm  MIT  alitiaa  at  a fMcttiMi  Iml  iitfe* 
la  MM  caataat  af  tlM  aitalllifeM  tjrtUM  arcfcltactwra  iM  tlM  tpactflc  IMMT 
iMflfratlaa  (Mm  pravlaaily  if  Mpara  9).  TIm  NI'i  iiraal  ai  Mm  featli  far 
Mm  ill«rta|  lafMMtlaa: 

a.  IMatifUatfaa  af  Mutm  pfcatft 

fe  IMaliflcattaa  af  Mtilaa. 

t Allacatiaa  af  crm  lull. 

i.  IMatlflcatlaa  af  crm  laMMtM  iltflaj  rapalraMati. 

Tfcli  MU  I|  iMHMTiMi  if  faactltMl  cltapry  la  flfara  19  aai  fen  tanaf  ai 
tM  MtM  Aar  fartfear  Mflaltlaa  af  tM  ItAMT  taftMra  faactlaMl  rapalMMatt. 
TM  MMiaiaf  aaraprapfei  af  til*  tactlM  (Sactlaa  ))  alll  trtafly  alafearata  m 
aac*  af  tM  Mctlaaal  cata«Klai  vltfe  fvrtMr  fatal  I praalM  la  tM  IMMT 
affl  teat  Man  laflMM  Sftclflcatlaa  St  A#M 

1 2.2. 1 fmcttaaal  Itftaltlaa  (SMBtry) 

fl«#a  19  Mt  caUfarliai  tM  IMtlflat  IMMT  veftaara  tapfartai  faactlaai 
lata  tla  Male  Mttlaaal  araai.  TMy  an: 
a ntytot  aM  arapahlca 

a CMMalMtlaai 

c Miftlaa  aai  fatiaaca 

i ftaylMf 

a.  Aircraft  i fit  am 

f.  tafama 

1.2  2. 1 I M10*  aM  ArapalilM 

l«  tan  fmctlaml  cattfKy  tM  IMMT  tyitaa  fmcttaai  aravtia  procauai  iata 
ta  crm  iliflaya.  Tali  laclaiai  tM  aflat*!  aai  cafllat*!  Mi*!.  fS0*i  aai  NAO'i 
aaa  tM  caatar  pa  aai  MAO  TMia  fui'ayi  ara  mM4  or  rafamattai  Aapaailaf 
rfaa  n l#at  aMia. 


M 


now  it.  iomr  'mcrtm  i*rrincATf«i  list 


0 dnUDEEl  Q 


ft  mm  n.  muni  m*u?  mm 


m 


TAOU  « 


DIStUf  VCOSUS  MO  ASSIKKEOT 


oiska» 

MO  #1 

ttLOT 

MO  #3 

MO  •? 
COOtlOT 

MV  STATUS 

I 

I 

COM  STATUS 

1 

I 

SVSHU  STATUS 

I 

(KI8  ANMTIIS 

1 

KMATVK  Aft  A BATA 

J» 

TAM  Off  tAKKTMS 

I 

CM I ST  MBAKTftS 

V 

«ruil  STATUS 

K 

Alt  BOOT  fLllM?  tAMVTItS 

l 

I 

Ait  mm  AKA  BATA 

1 

—MOOCH  BATA 

l 

iAOOlOC  AKA  BATA 

l 

Uf 10NT  AOO  BAlAOCt  BATA 

t 

K1CHT  AOO  HAL  BATA 

t 

riAK  lOVCOTQtr 

1 

iOU  SKCO  tAOAKTIBS 

t 

AltCOtn  STSTflfS  KAQOl  * 

1 

UABBlUK/CAUTlOO 

1 

flltKT  BATA 

l 

lAtfS  AKA  BATA 

« 

K«f  rVOU*  BATA 

l 

S10 

1 

S?At 

r 

BCUfftv  SrSTfO  STATUS 

displays  «*r  Table  IQ.  The  crwi  con  c 1 rv<wvent  the  auUMPtic  scheduling  of 
hft  displays  by  atm**!  1 y selecting  the  desired  WO  displdy  via  *he  IN* 


| 


3 2 2 1 2 


1 cation 


In  this  functional  ategory  the  MUST  spites  provides  functional  . oot  rol 
over  * he  oaaun?iotn»n  equipment  This  control  is  eaercised  by  the  res 
*riagrl  1 f or  eegns  of  the  Integrated  *ul 1 1 purpose  Keyboard  (IM)  and  the 
associated  Digital  Entry  Keyboerd  (0(0  ’hese  devices  sere  previous*? 
illustrated  by  Figure  9 Figures  22  and  23  dewanstrete  the  use  of  the  INK 
♦or  control  of  e JMf  transceiver  Figure  22  indicates  the  INK  reedowt 
ubseguent  to  selection  of  the  COW  top  key  The  display  indicates  oil 
d«untcet ions  eguipaen?  controllable  by  the  IKK  Upon  selection  of  the 
JHf  *1  side  key  the  neit  level  of  control  selection  is  displayed  gi  shewn 
in  Figure  23  Continuing  the  eceaple,  the  operator  say  then  proceed  to 
hanfg  the  current  selected  hannel  channe  17)  to  a ne«  hannel  (i  hanne 
21)  He  sould  depress  the  DtIM  SCIECT  side  key  and  entei'  20  jn  the  OCK 
•name -it  keys  and  depress  the  Hr  enter  key  The  10AMST  processor  sould 
ub  eouently  initiate  ectton  to  remotely  hangg  the  JWf  *1  transceiver  to 
hansel  20  and  display  the  update  channel  maOer  on  the  Ibt  Figure  24 
lists  all  the  <o«uni  cat  ions  control  parameters  for  the  lhk 


A Indicated  1 nterros  control  panel  .home  previously  in  Figure  9 is  used  to 
ontro  oca  I headset  vo  uses  for  the  various  audio  signals  available  and 
e ectton  of  eic  mmmunl cat  ions  eg  Jhi  »!.  JMF  *2.  etc  ). 

he  e ’unctions  are  felt  to  be  inappropria’e  for  lUk  usage  either  because  of 
hign  ♦reguenc y »f  usage  or  because  of  the  onttnuous  control  nature  of  such 
♦unctions  as  vot.we 


3 2,  3 navigation  and  uu t dance 

An  ntegrated  1 JAMS'  navigation  ystes  sat.  Jefined  previously  in  Paragraph 
The  basic  navipflonal  function#  tas*.s  performed  by  the  ’DAMS’ 

. tern  are  restated  as  follow* 

a danagpwen*  of  the  navigation  syster 
r©ce»,s*ng  of  navigation*  lata 

f«*-^a»*  ne  and  11  .play  4 na  v 1 gt  * ♦ wa  1 information 
v fti’  n o*  'eer  leg  * gna  ♦ r airra^t  ju*lance  via  the 
♦iignt  ant  rr  vs’e* 


I 


j 


«S 


At  o part  of  tkt  no* t fit  ton  oonofooont  crow  vontr*»  iM  Poto  tnpoti  «ro 
rtpitni  to  tM  laitilppl  notffottoo  tofctyttom  totA  <t  tAo  roPto  lift 
TP*  Mfc/KK  Pool  cot  irt  utoP  *#r  tAf  t porpoto  to  ottont  fol 1 y tAo  too*  nonno* 
«i  44Kr1M  for  tAo  coot  rot  of  tAo  coaoonftot  tor  opoipooot  ftforo  75 
toAulotot  tAo  tpocfffc  coot ro>  onP  «oto  ootr j function*  ottocfotoP  «tOt  tAo 
I MKT  witptto*  t ft  too 

1/714  fort ooP 

for  tAo  prwtot  of  tAft  ttoPf  tAo  pOf loop  function  ft  pottototcP  ot  prinortl 
o ttotot  Pttploy  oo  tAo  Aft  of  firtoot  poroartort  ottocfotoP  oltA  tAo  po/tooP 
t«CA  ot 


0. 

Stotut  of  rpap  ooP 

corfo  Poor 

A. 

CAuto  rolooto. 

c. 

Coot  ton  tlfool 

p. 

Job#  ttpool. 

0. 

Porotroop  oUra 

f 

Stotut  of  oft  Poor 

Oof  1 oc  tort 

TA4t  OttplOf  ro*ufrot  fortAor  tnvott IfOt Ion  to  Poftno  tpOCtftc  « on toot  0*0 
tuftoblo  foraot 

In  oPPttlo*  to  tAo  ttotot  Pttploy  ft  not  Ooo*  pottolotop  tAot  on  owtoootfc 
coryo  rolooto  tfynol  otll  oo  pooorotop  Of  tAo  CMP  oaputotfon  to  tAo  tooP 
rolooto  aocAonlt*  Itf  tpocfffct  of  tAft  tntorfoco  oro  unPoffnrj  oicopt  to 
tpocutoto  on  pottt  A*o  coof  t for  ot  font  It  ft  moot  tAot  tAo  rolooto 
■ocAonft*  Aot  on  outoaot tc  o*P  *o*uot  rolooto  ooPo  If  tAo  outoaot tc  *oPr 
ft  toloctoP  onp  tnwP  by  tAo  crow  t Aon  roc  of  ft  of  i CMP  ttnfnf  ttfflO  I util 
fntttoto  tAo  OwtO  Prop  tofoonto 

17  7 15  Afrcroft  Syttoat 

TAo  ofrcroft  tjrttoat  f one  t f on  ft  ot  tout  folly  o Monitor  function  by  tAo 
(MKT  tyttoo  TAo  fwnctfonol  roputroaontt  foil  Into  tAroo  tuA'froupt 
o Pomtnft 

b Co  ot!  o*  /l*n  ft  or  Inf 

C.  lott 

] 7.7.1  SI  Pom  4 n ft 

I MUST  •til  fncerporoto  uornfnf  fu*CtfO*t  oltAor  ot  opioP  or  ponorotcP 
CopfoP  oornlnp  functions  oro  oonftoroP  Ot  tAo  flipAt  Croat  AorPufroP 


(M— tcotM  —*• t tailutart  m4  opt—  into  Mw  I UNIT  pmnivn . 
—top  ire  t— o—ntly  lit  ploy—  on  mm  crti't  prt— ry  flt-it  <i»* 
pi— » Mi  mmmHiIi  «arpKy  irmiwii  in  mIkM  for  pttplpy 
Ml  MM  ptlott  or  cipllot't  *Mt.  (—1  — —mt—  f— cttom  Oi  not  — 
—bpi— tbtl  tty  for  ortft—ttnf  MM  —ml  op  ttf— 1.  TO  It  It  MM  rotpiw- 
t<b11 tty  Of  MM  iffoct—  tyttM  or  O—tp— Pt.  So—  —ml—  tip— It 
orlftnoto  ottOtn  MM  IftMMT  tjrttM  Prt— ry  rotponttbll tty  for  it  tot  - 
tton  m4  —rot—  of  Ml— > Ito  ottOtn  MM  IMMT  rot  ponitbtllty.  Tbo 
C—1—  MM  «•— TOt—  —rot—  f— CttOM  —0  It  fpIlMM' 

i.  Copt—  — mt—  f— cttont 

CfCS  (UoctronU  fltpot  Control  Vytt— » 
fin 

Poor /Poor 

SUOtlttor  Trto 

0.  Con  or  it—  —ml—  f— ctt— t 

brou—  proatotty  — mt—  will  — — nt—  on  t—  bit H of 
itrcroft  lit 1 1 w— r (Movo  iron—),  vortical  velocity.  enl 
fltfUt  — VH— 1 o—  enrol  — mt—t  otll  — ccms*— 
vto  t—  Mot  tor  Cm  t ton  t—t  color,  0—  tcot—  lltplayt.  o— 
fltpt  cr—  t prtoorjr  f 1 1p*t  twttm— ntt. 

Still  — rut—  otll  — ponorot—  on  t—  bit tt  of  floo  potl- 
tton.  o— 1r  of  ittoct.  *—  tOr—t  ca—utittont  tn  tOo  STOL 
conf t—ritton  Vtt—1  m—  t on  fllpt  tnttr— tt  me 
t—  *tttcl  Ihntr*  CO— Ml  olll  bo  tntttit—  by  tbo  I DAMS T 
tyttoo. 

0—  rtpo—  — mt—  otll  bo  ——rob—  •— n tbo  co—wtor  itr- 
H — oat— Ot  tbo  itrpli—  —a to—  tpoopt  { Vr/i^ ) Aonl 
— mt—  (clocbor)  otll  bo  prov to— , nttb  vtt—1  IHpliy 

1—  tcitton. 

Spo—  too  — mt—  otll  bo  oioorit—  M—n  tbo  coo—il—  llr- 
tpo—  tt  lott  tMe  i pro»et tobl  t tb—  too—  bot—  noon  itr- 
plmo  fllpbt  r—t—  (ST0L/CT&).  Anril  —ml—  (clicbor) 

•111  — provtO— , nttb  vtt—1  lltployt  «— notion 


— 


r 


U.M.I.I  cauti«n/i*ni  taring 

1MKT  «111  pirfiwi  c— tlto  and  —altering  f— ctlens  far  tN  tlM  n»M 
tot—.  Tbd*p  f«ct(«n  wilt  elttor  to  cep lad  (Hcpatory  tetptolMlty)  or 
pmM  (prl— ry  responsibility)  iM  in  M flllM 

«.  Copied  cMtlw  fipcttm.  tlan  functions  <ra  copied  fr—  Hit 
Mr4H mi  c-tlen  advisory  Indicators  in  tto  pi  lat's-capllat's 
crai  lUtlw  ^icwOry  CMtt«i  a<ll  to  pirilii  Mi 

displayed  m to  HPO*t.  Tto  f—ctians  in  tepid*  or# 

HictHcii  unto 
totoHe  sjrst— 
f*i  tjnto 
toMiiry  layer  control 
Mr  conditioning 
Anti -Ice 

Ovtfboed  caution  e——cietor 
I rote* 

C*fS 

b.  tenl tored  functions,  These  functions  irt  derived  fron  nonltnr 
snnsors  and  displays  of  significant  pore— tors  aro  presented  to 
tto  cr««  on  tto  toO*s.  Ttoy  aro  as  ft) Ions 

tnglne  pan— tors  (01 , 101,  02,  11,  oil  pressure  and  oil 
ouontlty) 

Hap  position  (loft-  upper  surf aco  bio—  flaps,  rl jpt-uppor 
surf a co  blown  flaps,  loft  Inboard  flap,  right  inboard  flap 
and  right  inboard  flap). 

3.2.2. 1.5.3  Tost 

I0ANST  will  incorporate  a 1 Ini  tad,  In-fllpbt  tost  capability  by  virtue  of 
HTt,  software  reasonableness  tost  on  input  data  or  associated conpu tod 
values,  and  correlation  of  sensor  data  by  direct  comparison  with  redundant 
Hardware  or  sinllar  Hardware  Tost  data  will  bo  recorded  on  tto  digital 
Integrated  test  syt—  (OITS)  recorder  Selected  data  will  also  be  trans- 
mitted to  tto  Crash  Data  berordar  (COM)  for  recording 
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1.7.2. 1.5.4  Control 

Upon  initial  I OMIT  ttartM  tha  ntMla  p oopr  tn  tM  variant  (OMIT 
intoprotpd  lOU't  It  ii»aml  an  In  a prodata  mlnad  aan opr  fron  tkt  nlttloa 
procat  tart  A dad ica tad  pMar  control  paaal  It  alto  avail  aPU  to  pravldo 

pawrr  control  of  tha  IIMIT  corv  tlanontt  Tha  crao  can  talactlvaly  tom 
paoar  off  any  ifti  via  tha  !«.  A pooor  ttatus  rooort  It  avallafelt  to  too 
crao  an  a to 1 act  tat it. 

Alton*#  not  locludad  in  too  raoMlraaantt,  too  IDRNST  tjrttan  paoar  oanapa- 
nant  caoaOl 1 Ity  can  Oo  antoniaa  to  ratcOaOxiv  QimtOaon)  avion let  hardnaro 
on  a priority  Oat  It  in  tOo  want  of  radacod  aircraft  alactrlcal  paoar 
paw  ration  to  nlnlotia  load 

3.7.7. 1.5.5  Oafanta 

Infra  roo  Qa  tact  Ion  ana  naming  |RfM)  capaOlllty  It  part  of  Mo  antic 
avlonlct  apulpnant  conplaoant.  AttoclatoO  oltO  toit  apulpoant  It  tOa  flarat 
aitaantar  far  It  caontar  oaaturat.  TOlt  tyttan  It  attoM  la  fea  autonatlc 
upon  crao  onoOl*.  TOa  I MUST  tyttan  fonctlan  It  rattrlctaO  to  control  of 
tOa  I tun  on/off  and  autonatlc  oparatlon  anatla.  A tOroat  Oltplay  ant  flarat 
» tarot  ttatot  It  aotoaotlcally  cal  lot  up  on  tha  pi  loft  and  capllot't  MO 
upon  throat  d» tact Ian. 

TOa  tadar  Honing  and  naming  capaOlllty  ’*  • pattlva  davlca.  On/ off  control 
It  via  tn#  tM  A throat  display  It  ovohad  on  tho  pilots  and  copllat't 
MO  slmlar  to  tho  I ROM  upon  throat  da  tact  ion. 


U 


SO* TIME  NSW 


TOo  I MUST  wft«rt  Utifi  rifrimti  flit  if  MIS  totnnolofy  to 

tl»  tpKlfH  fmcttMil.  mMUctaril,  iM  ceaftperitleael  n»itrwi«t>  of 
tH  WST  itrcrift.  Tim  IMHIT  wftMM  It  IttlfMl  to  utltfy  too  fmctlOM) 
refalranpatt  HuvttM  I*  Section  ),  for  Mtk  ooril  iaf  fit  loro  will 
ArcOttectarilljr.  tHo  IMHT  toftaoro  It  t tat  lor  to  MIS  aft*  teat  aoOifteotioo 
mo  choaft  occwrrlaf  it  tkt  Ootol  lei  openttenol  looel,  Ho  tjttlftc  I MRS* 
toftaoro  cooffparettoo  It  Oy  nocettlty  Otfferent  froa  MIS  Oocioti  of  tHo  cen- 
tntt  l»  oporit I oral  rtotlnMMt  H—ilr,  aOoro  fa*Ctten#l  cooaonillty 
ealttt,  tht  IMRST/MIS  t tract  or*  ill«n  a M^i  Oepree  of  row  to  of  MIS  tpetl- 
flOP  toftaoro  toapoaeatt 

4.)  I MUST  OfftATlMftl  filMT  MMMRS 

Too  I MUST  Opart  t tenet  FlIpM  Proprooa  (Off)  iro  or port tol  on  too  Oot It  of 
MIS  ircMtoctarol  Oetlpn  inO  OtvtOeO  Into  tOree  citoforlot 
i Off  (mc tit tvo  Softaoro 

0 Off  Appl Icotlont  Softaoro 

c.  Off  Crror  HoaOltap  enl  Aecovery  Softaoro  (MMS) 

TOIt  Ootlc  frowplnp  of  toftaoro  It  tooaa  In  Ftyaro  ?4 

TOo  eaecutloe  toftaoro  pro*  I Oot  tOo  control  of  tPo  Appl Icotlont  inO  IMMS 
toftaoro  inO  Itelitot  or  Owffort  too  to  propnat  froa  tOo  aecOmlta  of  Oita 
trmtalttlon  betaeen  procot  tort  mO  ivlenlct  opetpaentt  TOo  Eaecwttve  teftaarr 
control t toit  doti  trmtalttlon  aocOonlta 

TOo  Appl Icotlont  toftaoro  pro *4 Oot  tOo  OotolloO  toftaoro  fwactloat  to  twpnort 
tOo  MS’  alttlon  anO  oporotloaol  r opal  r won  tt  ot  lOontlfloO  inO  OltcattoO  In 
Sort  ton  3 Torowpo  too  (aocwtlvo  toftaoro  too  Appl Icotlont  toftaoro  coamml  • 
cotot  alto  too  ovlonlct  Opulpaont . crow  controlt  onO  Oltployt 


TOo  [M MS  toftaoro  pro*  I Oot  tyttoa  error  rototor*  Oao  to  ail  fmc  t ten  OotoctoO 
In  a*lonlct  opwtpaont,  too  Ooto  oananlcot lent  netaart  or  tOo  alttlon  pretottOM 
Toe  nocOonltn  for  EHAtS  It  OlttrlbwtoO  torowpoowt  too  (*ocutl*o  m4  App ltcitten 
toftaoro 


S3 
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4.1  1 I MOST  loft anr*  AnhlUctar* 

AltMaW  tftt  IWR5T  MftMrt  nrchttoctor*  Mt  IN*  Mrlvo*  fr«a  Mir  MIS  nrr  hi  - 
tKUrt  tlvri  «r«  mm  t1*n1  flcnnt  41  f forgot r in  tM  fane tin* in*  of  tlM  Moni- 
tor frocottor  To*  I WRIT  toftanr*  It  *1ttr1b«to*  naoo*  thro*  procottort  nil 
of  aftlch  or*  net  In*  If  perforate*  nlttlon  of*r«t  loot  Tae  of  tM  thro*  promt  > 
tort  Mi*  virtue*  iy  4*0' lent*  toftunr*  On*  pret otter  it  4evete4  to  precottm* 
rnpnottt  no*  41tp1«pt  for  tM  pilot  nn4  tM  nth* r It  4»vete4  to  tM  copilot 
Th*  prlflory  41ff*r*nc*t  lltnon  tl»t*  tan  procottort  It  tMt  on*  cento  tot  to* 
Mltt*r  (nocatl**  ahlfh  it  r*tp*nt10l*  for  Mtomtntn*  If  tMr*  Mi  0*«n  n 0r*o«- 
•rnt  1 v*  foliar*  or  orror  In  tM  etMr  pr*c*ttort  *n*  nltMr  Mt  ttoppo*  pree*t- 
tin*  nr  aatt  0*  ttoppo*  TM  Matter  natt  tMn  tnM  e»*r  control  of  tM  4ntn 
coaMun  lent  lor  n*ta*rk  no*  roconfifar*  tM  tjrtton  to  occ*ppo4nt*  tM  foil** 
proc*ttor 

Our  in*  recovery  fron  nn  *rror  tM  toftaor*  in  *1tMr  of  tM  tae  procottort  It 
cnpnOl*  of  1nt*r fnc In*  alth  both  tM  pilot  nn*  copilot  Oevlcet  Mt*  tM  Mot* 
t*r  nn*  Monitor  frocottor  contnln  ton*  nctlv*  nn*  iMCtlv*  toftaor*  Ourtn* 
normal  oporntlon.  M never,  aott  r>*an*nnt  function  nr*  nctlv*  to  pro*  14#  nr 
orror  4*toct1on  mpoblllty 

Th*  Locnl  Caecut 1 v*  pro*reat  nr*  lOonttcnl  In  nil  thr»*  procottort,  olthou*h 
tM  tntk  tnblot  contnln  4lff*r*nt  ontrlot  TM  locnl  laocuflvot  nr*  r*tpon 
tlblo  for  totltfyln*  tM  ioni  Tin*  mount  of  tM  tntkt  TM  laocuttvo  mitt 
*1tpotCh  tntkt  aMn  *«*ntt  Mr*  b**n  opproprtot*1 y tot  oltMr  by  tM  clock  or 
by  otMr  tntkt  nn*  m\t  coaonintcoto  alt*  tM  locnl  Ciocwtlvet  In  tM  etMr 
procottort  In  or4*r  to  tyathroa1<*  tntkt  In  nil  thro*  procottort 

TM  Appltcntlont  toftaor*  It  or*nn1<*4  In  o MornreMol  control  t r**  ttructur* 
Th*  tntkt  nr*  t*pnrnt*4  Into  Controllor  nnd  Calculator  fanctlont  CnCh  tntk 
Mt  n ant***  Controllor  f»mt1on  ahten  It  tM  only  tntk  porottt**  to  tcMOulo 
It  TMt  It.  n tntk  enn  only  b*  invoke*  by  o tntk  nt  tM  n*it  h1*Mr  1*v*1  of 
control  Moa»v*r,  rvontt  upon  ahlch  tM  tntk  nCtlvntlon  It  bnt*4  enn  bo 
tipnn  1*"  by  Utkt  nt  nil  etMr  1ov«1t  A tntk  aatt  b*  tcM*a!o*  nn*  nctlvnto* 
Mfor*  It  cow  M*1n  •nPCUtton 
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I*  IflflBT.  tH  klUr  W^MKtr  li  tH  U»  ImI  («Knll«r  UU  (m*  Hfpro 
It  KMilw  Ut  taUrtla  SUUt  kaitor.  C«af  ifnttr . «•<  lt««u 
Nttlttr . Til  priori  CMtnl l«f  if  III  toit  lot#'  of  (Wtr«l  *t  (to 
fMtoa  tokk  utotoltt  MM  cmmIi  tott  if  (to  (^iptot  Ittortotk  f«K(iWH 
( («m).  litoitMtoi  totoMirt.  im  • «i(  Imi  •*  ctotoii  toiN  ••  «utito 
—Ot I . Into  »toik  tpitollit  Itottttoi  (tv  (pc t * toll  #♦  Itottol  tovto 

m pilot  toptotk).  wMpaMttotol  (pc Uliit  f toe t itot . pp  H t#l«r  Itor  *k« 
IpctlPk.  TH  CtoflpriUr  it  Up  toUr  toitntto  »\  ntptollU  •»»  (to 
CMttol  if  (to  IpiiuiiPi  UUt  ••  (to  totdr  top  toad  toacmr  toil*  tat 
%Mtof  (totlftoltor  Itolrfll  Kl  totot  lplltf(lM-.  MttMto 

4 1 2 1MRS*  (ncttlft  Ttottliiii 

Tfto  CtoudM  ttotdu  «f  * %tt»f  (MKttlft  tad  i Hill  [itoiftlw  A fwito 
■toUl  toil  ft  pjictiit  of  tip  (wcvtito  it  to  lulitt  tat  ctofKttoiittti 
ta#  IHRT  atrtoptt  ffp  tat  ipiiutitot  tiftart  Tp  Aphcititoi  tttit 
ton  to  IkftoPtlto  it  tt  Kt  location  or  tto  Itoittto  tf  tty  (ltd  titu  toitk 
it  cooMpicttn  fiti  tMtotitkdto  ©tcora  »ii  toti  1»  ttopoh  ito  tit  trtat 
•ott  tf  tattt  wrtaodl  tf  tOPpalcttiO*  art  provided  »y  • Kt  Loca ' lie  utivr  If 
tto  .OtopOQ  I \ tat  tvtfitt  Iff  located  Odly  in  oat  pro  ttvor  tf  OpOO'  I tad 
fitott  trt  »itMr  totofiwrt  ettof  (Me  tto  oat  torn  tP  tie  *tire  »fnl f 
toff  fptoltH,  tatr  tat  Ullttf  lie  jtlff  ll  rftpulklf  for  < toy  iit’la* 

(ia  conjunction  wit*  tat  local  CiOCwtire)  tP  Ptt  tt  tto  tpproprta te  prr*  t 
»#f  toll|Mtf4  fey  tto  local  (aecutive 

Tat  %ittr  tie  ftlff  it  rotpoatifcle  for  controlling  til  Ototol  ttlto  Ptuee- 
procettort  tad  P tutor  rtaott  ttmltoli  Tp  toitff  C«ec«tire  contrail  tad 
forwwlittt  tP  COPPndl  to  tP  Attt  tOPpaicat  ioat  at t work  to  tl  re*oe  tt  for 
oppaicotioa  tott  ye  taroipe  tP  Kitte  tie  iti»f  Tait  In  iti»f  it  tto 
oaly  tourer  of  tOtolute  tip.  tad  it  frtpttlllf  for  Initiating  tt  a ainor 
yelt  tad  provldiaf  *P  autoaati  ijmctoOtoai  iapi*  tad  output  for  etc*  ataor 
cycle  Oy  atria*  t lilt  of  tyacaroaou'  coppadt  f»r  eoca  alaor  cycle  Tp  trror 
padlia*  tad  Aocovtry  aodult  tPt  trr  t part  of  IP  Hatter  (aocutive  provide 
for  errort  ritk  retpOCt  to  COtoOwaictt 1#a  tad  to rr  f’rtoft  failoret 


flGUW  V.  10AK5T  Soft Mrt  Arcftttoctwr* 


’he  oca’  ladt.tft’v*  provide*  *he  norm  Mol-Tiop  Eie*  ut've  trvHn  to  tho 
AppHcat 1or\  u «tM'f  ^sw<  h t*r»u«  ifw  lude  (a)  initiation  of  tasks  according 
tc  event  condition.  and  Us*  priority.  fb ) posting  (c)  scheduling 

tasks.  (d)  Cancel  ing  and  temtnating  t«Us,  se  suspending  lists.  and  waiting 
♦or  a par* 1 ular  even t.  f t ran s f err 1 ng  < — poo'  data  at  voiding  to  OtAC  4 n€ 
d*ITt  Mkqwdsts.  and  g preparing  for  the  beginning  of  4 new  wlnor  ycle.  wh1c* 
tnclidts  preparing  to  recel  ve  and  1M4  wastage  t related  to  4 sftnfic  wiwor 
Cycle  and  Invoking  tasks  That  have  boor  waiting  tor  the  given  wlnor  y le 

4 t,J  Application*  Software  Structure 

figure  ?$  Outlines  the  wajor  applications  software  tasks  ’he  Paster  sequencer 
serves  as  the  root  of  the  control  tree  The  dequest  Processor  Melds  control 
inputs  from  *he  pilot ‘Copilot  and  relays  the  request  if  valid  to  the  configurator 
’he  ^on'igurator  acts  to  schedule,  cancel . and  act  irate  »he  tasks  appropriate 
to  the  crew  request  The  SwtHysten  Status  Ponitor  records  »he  status  o*  all  of 
•he  equipwent  as  we  as  fielding  errors  reported  to  it  toy  the  iqu  ©went 

nter*ace  Tasks  'he  status  o*  the  devices  are  period!  ally  re  orded  *n 
. trrage  for  diagnostic  analysis  when  appropriate  "he  iprrattona  sequencers 
reflect  the  ICdl'feren’  I0ARST  wission  wcdes  and  provide  mit  tal  ijalion  at  the 
beginning  ©♦  ea« h vwde  ’he  irute  rorce  Spe  lal  st  function  are  on’ro'ler 
task  for  the  tpecIMc  pilot-'  opllot  requests  other  than  slsslor  node  ha*  gr 
hese  ♦actions  alio*  the  re*  tc  per  fore  certain  wission  operations  not 
automatical ly  available  to  ’he  current  OOS  that  is  a five  *hese  fun  tions 
operate  jpon  the  various  equipwent  that  is  a part  • ♦ the  integratei  av!o» 
y stow.  ’he  Imte  force  specialist  functions  are  also  responsible  for  ettlng 
navigation  parawete'S  and  displaying  various  checklists  ’he  spe  ialists 
♦unction*  provide  »he  computations  for  navigation,  cargo  drop,  and  ontro*  of 
so aw  display  tasks  for  the  I*t»  and  W Cquipwent  Processes  fore  »he  interfa  e 
Oefueee  the  specialist  functions  and  sensors  Thes«  tasks  are  de  ‘gnetf  to 
Sdlate  the  hardware  charge ter ist it s o*  the  sensors  froe  the  rewa  nder  ©♦  the 
Applications  Software  In  the  * awe  way  that  the  l*ecut!ve  *s  desiqneo  *©  isolate 
the  data  * oapwiri  a tions  network  ♦row  the  Applications  So*tware 

The  Display  ►rocesse*  are  tasks  which  owtpu’  display  Inforwatior  to  the  *eu 
Disp  av  tasks  include  lights,  *hJC . M$0,  Hhf  1*0 . and  sowe  onvenMonal  instru 
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4 » 4 Error  Hindi  ing  «nd  Petovery  Soft  Mr*  (EHAPS) 

DAHSI  OfP  EHAPS  It  specified  for  thro*  Oiler  functional  areat  (i ) retponte 
to  errort  occurring  internal  to  the  I0MIST  wittier  procetvort  Including  cowpu 
ter  pro grew  induced  errort,  t> ■ retponte  to  errort  occurring  In  the  data 
oraauricat  lent  network,  end  < retponte  for  error  t occurring  In  tubtylfee  ten 
sort.  it tuitort  ind  crew  station  (ontrwlt  end  dlspleyt  dlthln  each  f uni  1 1 one 5 

ere*.  E MAPS  will  er  owplltr  the  functions  of  detenvinlng  that  in  error  of 
tuffioent  teverltv  to  degrade  t ft  ton  porfornonce  Hit  occurred.  itolating  the 
<tf peeled  iubtytlew  end  notifying  t he  top  level  control  prograw  to  rewove 
'he  faulty  iubtyttew* function  from  ter vice 

F unct lent  Inplen ented  within  the  OfP  Appllcitlont  Program  are  responsible  for 
detection  of  data  r*a tonabl enets.  Inproper  subtytte*  tentor  sequent et  and 
incorrect  operating  nodet  The  OF P Appllcitlont  toftware  It  alto  titled  with 
••king  conparltont  between  retwltt  obtained  from  redundant  and  titllar  tubtyt- 
tent  (e  g, . T»9*  and  IMS  derived  petition  and  it  titled  with  reatonable  rate 
and  retponte  tine  tettt  of  data  where  applicable  Errort  detected  in  the  tub 
tytten  tentort  are  handled  by  the  OFP  Appllcitlont  toftware  when  thote  errort 
are  not  tlyialed  fhrough  but  Maueicotlon  error  ttatwt  information 

‘HAPS  procet*<ng  within  'he  0 TP  Local  Evocative  it  titled  with  handling  of 
*1  ttion  procettor  and  nenory  III  detected  errort  Cooperating  EHAPS  code  it 
required  *n  the  Hatter  Honitor  Evocative  to  retpond  to  procettor  internal  errort 
in  other  denote  Procestort  ‘HAPS  retponte  to  procettor  Internal  errort  wil 
aute  the  procettor  In  which  the  error  occurred  to  hoc  one  pattive  with  r*tpect 
♦0  data  ownunicationt  Cooperating  l HAPS  retponte  in  the  Ha  iter /Hon  I tor 
procettor  nutt  be  to  retpond  to  the  pattive  'no  retponte)  data  ommjni cation 
network  or  to  *rror  retponte  'row  the  errant  procettor 

‘HAPS  p'ocetting  within  »he  Kill  controller  of  *h*  Hatter  Evocative  it  tatked 
with  handling  of  errort  detected  in  the  lata  >nnuni cationv  network  ore  e*e«ent 
81*  ownwnication  errort  detected  by  the  units  inc  ode  data  trantwlttion 
errort,  data  network  nestege  onten*  or  sequence  errort,  K1U  or  Benrte  rml 
nal  ‘allured  and  incorrect  operatlont 


W 


1HMS  mn t net  »ly  detect  errors.  but  it  iMo  m\ t * tolerence  to 
intermittent  errors  A portion  of  [MAKS  In  the  #om  of  the  subsystem  SUtrt 
Monitor  aust  nelntetn  4 record  of  the  frequent*  of  errors  so  thet  inteml  ttent 
errors  cm  bo  permitted  « to  i predefined  threshold.  Once  the  threshold  ms 
boor  exceeded.  IMAKS  mrst  bo  cble  to  foroulcte  requests  to  the  Con  figure  tor 
to  con  col  [quips  functions  thet  .owMinlcoto  with  the  errent  subsystems.  ’be 
Configure  tor  is  responsible  for  sue*  concoHotlons  bocouse  it  Is  the  controller 
for  the  Equips  functions,  ^e  Gonfiquretor  mst  4 Iso  request  the  Mester  [necu* 
tire  to  stop  coootfilcetinq  «1th  the  errent  subsystem. 

[MAKS  ney  determine  thet  on  error  hes  occurred  uhleh  requires  reconfl pure t lor 
Such  reconflquretlon  fellures  Include  enomelies  In  nlsslon  processors.  bClU's 
or  en  instruction  eaecuted  In  4 proqreo  uhleh  results  In  4 detected  error 
condition.  The  aechenlsn  for  recon flguret Ion  will  be  discussed  In  peregreph 

4.2. 
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Tto  MftMrt  SHtrltotlO*  •—Of  tkt  tM*  *' V#M  «rtt  Uttif;  tto  fiUKtlOMl 
»tot  toot  b«M  *m*  t**  itftMrt  Tto  f«KtlO«4l  r*H«i*ro- 

■•nts  Hi*  boo*  dltcottOd  1*  Soctlon  J.  o»d  in  0»to * 1 In  tto  09P  Applliotlont 
wn«ff  S*Klflcotto*  (St  404?) 

Tto  toftMrt  oust  die  to  (••flfwrH  to  to  nltMn  tto  conttrolntt  of  orloalct 
torOaoro  Tto  1 1 It  of  tto  profooort  ttoold  to  lost  ttoo  M r «r^  Tto  toft- 
■oro  to  tit  ttowld  to  fHtrlMH  Mory  tto  procottort  tact  ttot  Tto  opacity 
Of  tto  Soto  unouwlcot Ion  not  work  it  tot  oncooOod  ’to  ttalftf  of  ttoto  to  It 
It  ItoKtlM  vo  ttot  ' to  *um ctlont  rocol*o  tM  -to  Soto  *to  Tto  contort  ot 
toon  «t  Tto  doto  It  o*oi  oblo,  In  o rttfr  ttot  -pdatod  Soto  con  to  t/uttot  ot 
ropldly  ot  OOffltlo 

Softwono  In  0 tjrtloo  l«(T  ot  ‘MPh’  aott  to  Srt'ynoO  tor  | ro*>’r  to*  jO  . te 
•to  opobll'tlov  oil  to  oOOon  ot  tto  tKHoolftj!  Jo. el  opt  ’to  !0W  ’ of*,  *• 

It  particularly  Of  lf«tr<  * mgr  ft  yr-t* tot*  In  fto  i jot»»  ♦ pr-  o oto 

In  tto  plo«omon»  of  totH  In  ^rotpc  ort  "to  C»o  -Moo  So  ^nol  ii  o'e 

to  *1  Iron  Ottor  Totlt  n >r  Se»  to  *oCl  toto  po*ti  of  *,*ort  to  rif  o 
tolrorrOy  It  oltO  So  1 90* fl  to  To.  iHtote  orpotn 

’to  onfloarotlon  of  )44 IS!  *i>MrC  Otfn*  tofe'y  oto  *to  m f mo 

O*  ilmiMr  otton’iol  nporotloAo  opajHttle  fey  to»l"|  Su*lt>e'e  pie  * . 

atntaun  ottontlol  ,ot**ore  or  -rrortly  ^to'o’  no  n too  on* -’or  Tto  " 
•ore  It  ottontiolly  toontl-o  'or  »to  totter  oto  *%>n1»or  pro  0 tor  «< 

toon  tr  lining  •*<  tl/lry  ottlnoto  firm  r ’ofclo  1 ’to  Tof  e«o  *•» 

tyttom*  Inr.loOo  totn  mo  » *0  a*l»e  oto  Tto  App  I otlon  <ir'rpl  ff  * j*  ? 

’to  totter  (to  ll*o  1"  if  yor  t tor  ’to  H>fil*,or  lie  -t  I *0  to  0 - 0 * to  to 
(••Cwttvo  to  * intro  onto'*  otlpn  *aony  three  pro  o tor  end  the  **  Mti 
»r  lit  no  It  n y on  omoS  *1tn  ow*nl  e'lor  botwoon  1“  o * end  »to  ,* 

'nr  *to  PC  0 f *0  ^t*»0  It  protont  In  »to  Af«Ote  to©  e Jr  to  (S'  trl 

<'  r t *to  Appl  I o*">nt  S'  T»*aro  functions  oro  yl*n  •«  f ly«rr  v **■ 

-r  *,oJoS  4 -r  » 1 r trt  tto  0 oM  r ere  Owe  I eted  In  »to  Ho  »er  of  tonlttjr 
* ft*  o r A or  bo  toon  n 'to  My*rt,  tto  prloory  f«nctlo»  r*  or*  ed  T r 

'to  ioMf  »o  Aro*  e tor  oro  Arpo  to*  loot  Ion  ond  Alrcreft  Syttto  'unctlont  Tto 
Sotollod  SI  trlbvtlon  of  Tto  iwcttOM  It  )l*rr  In  Append! « I.  on  flylnq  ond 
ttolny  of  The  Of*  to f ’ «M ro 

4? 
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4.2.1  Hiss  ion  Kaput  remonts  for  Aecenflpwritlen 

*he  system  level  requirements  lopesed  on  the  IMNST  roconf 1 duration  irt  derived 
#rem  the  alsslon  scenario,  and  frem  the  operational  analysis  of  Otis  scenario. 
System  level  requirements  art  listed  be  lew 

a.  rteevy  crew  wort load  In  a two  — n cron  onvl ronmont  requires  that  recon 
♦ 1 duration  ho  automatically  control  ltd.  Tho  fllpht  crew  Is  not  oipec- 
tod  to  aofce  diagnostic  doc is  Ions  In  dotorwlnlno  what  systoa  coro  elements 
aro  aval lahlo  and  serviceable  for  Inclusion  In  tho  altorod  (non)  systoa 
confl duration. 

b hodundant  pro cos sing  capability  Is  required  In  a hot-standby  aodo  of 
oporatlon  to  provide  ^Interrupted  procoss Inf  of  essential  croa  Inf or* 
nation  displays  and  alsslon-crl tlcal  fiotctlons.  despite  the  presence  of 
alsslon  processor '|C!U  failures. 

c.  The  oil stance  of  Mission-critical  crea  decision  points  requires  that 
avionics  Information  displays  remain  current  and  accurate  despite  slnqle- 
eloaant  failures.  Caanples  of  Mission-critical  dec  Ison  points  are 

CAAP  In  presence  of  enemy  threat  uhere  fo-around  presents  eicesslve 
risk. 

INC  lending . SO -foot  decision  point. 

d.  H 19*1  -accuracy  worldwide  navlpatlon  capability  requirements  and  conditions 
teuslnf  tenporary  unavailability  of  e itema*  navtqatlen  aides  ( such  as 
eneMy  Jawin')  require  saoothlnq  of  navlqatlon  calculations  by  a lonq- 
tine- constant  filter.  Kequlrenents  to  eloolnete  eacesslve  settling 

time  and  Maintain  overall  accuracy  require  redundant  storaqe  of  Inter- 
Mediate  results  and  tine -dependent  data 
e Crew  display  Information  used  as  the  basis  for  control  decisions  In 
controlling  the  aircraft  (e.q.,  vertical  situation,  air  speed1  mast  be 
current  and  updated  within  the  response  tine  of  Naun  vision  to  avoid 
*jtmp1nq°  In  displays.  Display  Information  that  Is  not  current,  due  to 
systee  anomaly,  mist  be  removd  fren  display  (as  opposed  to  freezing  to 
forte  the  flight  crew  to  revert  to  dedicated,  hardwired  backup  displays 


f Miss  Ion -dependent  data  (such  it  navigation  waypoints  or  cargo  ballistics 

Mti  and  the  present  system  state  c—n<i<  by  flight  crew  inputs  at 
control  panels  require  redundant  computer  memory  storage  to  ovoid  lots 
of  tbit  date  One  to  1 Ingle-element  folium. 

g.  Multiple  device  folium,  separated  In  time.  ond  alstlon-sof tware- 
controlled  node  switching  of  ovlonlct  subsystems  requires  redundant 
storage  of  tobies  of  subsystem  s lotus  Ooto.  following  reconfiguration 
to  circumvent  o foiled  processor,  tfte  remaining  processors  aust  be  obit 
to  determine  the  ovolloblllty  ond  current  aode  stotus  of  oviontct  sub 
systems  o«d  effectively  continue  processing, 

4.2. 1.1  Architecture!  bequ 1 remen ts 

Additional  requirements  ore  imposed  on  the  I0AHST  reconf Iguratlon  approach  by 
the  betel ine  sys tea  orchltecture  ond  by  betel Ine  operating  procedures  these 
requirements  ore  listed  oeloa 

o.  Tao  magnetic  tope  tronsports  ore  ovolloble  for  possible  use  In  reading 
redmdant  copies  of  flight! Wf)  ond  test  (fOT»)  programs.  Typical  dote 
tronsfer  retes  of  this  type  of  device  Indlcote  o processor  aeaory  loading 
t tae  for  « one- thousand-word  proproa  of  0.8  seconds,  dlss lon-crl tlcol 
functions  require  redundont  processor  resident  S tor ape  to  ovoid  unoc- 
ceptobly  long  Interruptions  In  processing  during  reconf tguratln* 

b.  Avionics  fcrctlonol  copoblllty  end  flight  crew  to  avionics  Interfaces 
reaolnlng  ofter  reconf Igurot Ion  are  required  to  be  the  some  regardless 
Of  which  processors  reaoln  functional.  This  In  turn  requires  that 
appi  1 cat  tons  software  be  activated  In  remaining  processors  In  such  a 
manner  that  The  some  software  capability  Is  present  In  any  mmlnlng 
two  or  feaa<n1ng  one  processor,  regardless  of  the  contents  o'  proces- 
sors prior  to  reconf Igurotlon. 

c.  becon figuration  restoring  a 'ull  three -processor  system  (e  g . recover* 
of  the  third  processor  'row  a temporary  power  Interruption  returns  sys 
tea  capability  to  the  normal  pre-failure  level 

d.  Subs ys teats)  that  have  beer  removed  from  service  as  a mult  of  recon- 
flguratlon  are  required  to  be  tested  for  availability  both  periodically 
and  on  flight  crew  demand  If  declared  available  by  testing  and  enabled 
by  the  flight  crew,  where  sufficient  processor  capacity  e»1sts  for  asso- 
ciated software  the  subsystew  ant  be  restored  to  service  by  reconfigura- 
tion of  sof teare  If  necessary). 
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*.2  2 lotoeftywratloa  A pyroytH 


A yoo*  for  ro«o*f fyurattoa  It  IHot  all  tafetytto**  altHI*  tWMT  be  aoaayetf  fa 
VacH  a aonaer  t Hot  * H#  «i(«#  pottfble  capability  ortylaally  Pet I ya#<J  Into  '** 
tjfttto  bo  lillUfclt  to  tt*  fllyHt  cr*r  TMt  porayrop*  «uutm  tt*  rr  or 
♦lyueotloa  approoct  eapored  oftor  ottwrreace  §f  tMMlMtt  1«  ahllott  pr«t»t 
tort  Or  •t.!U‘t  or  00  lattnKtlOa  It  tiKutH  to  «o  Oft  aHICh  rotyttt  to  tf 
error  coa^ftfoa 

Rotonftygrot  too  fooctleot  ar*  erole*  aH#a  nQraa  tyttea  error  HoaAl  toy  tt  aot 
able  to  rettore  the  tyttea  to  tt*  Of*r«fele  ttote  toot  eatttetf  bo fort  KCiirrcmr 
of  tHe  aao «aly  Atteaptt  to  retur*  tHe  tyttea  to  a*  operable  ttote  laclabe 

retrtet  400  atteaptt  to  wte  otteroote  lata  oaowotcottoo  pOtH, 

Recooft yurot too  tt  eotereO  aafoaat t to  11  y f no*  tyttoa  betkup  faealtor  f *a< 1 1 e* 

Of  tt*  Off  Hotter  [iHvtlvr  operation  or  c*o  bo  eatereo  outOOMttcolty  4*p*aO 
toy  on  taplearrfat to*  *f  »t*  Cro**4  T*tt  Preyraa  Hitter  teecottre  **at»len 
froa  J»r«v*»0  Tett  Profrae  precettfny  tetoof  ty*rat  too  «tet  tft«yo*ttt<  tofora# 
tl©o  ttorrf  to  to*  »l  tt  too  privfttor  a* warp  -Hirtoy  error  OooAttoy  »oJ  #r  t*e*r 
»lte  4lO‘*iOftil  core  efeaeo*  te.tt  to  OetenHoe  availability  of  tHe  core  e'earrt 

►perotlay  *eO*r  toe  OfP  Hotter  (eocottve.  retoaf tywratlo*  telectt  4 aortlay 
Oflftyurottoo  of  ore  eleaeatt  4o<J  telectt  tHe  one  corretyoayiay  totte  of  *f* 
tpffaare  ac-Awle,  • e or*1y«retl#*  toperyltet  IpaOlay  of  OfP  toff*4»e  at  Ow  e 
fro*  tHe  reJu*4an*  copy  tiered  pa  aoyaottc  tip*  Cittette.  eatwret  t»Mmi 
/it  to"  of  ♦ He  tyttea  e*4  tyri  1 1 oateat  *©r  talt< Hover  to  tHe  ae*  < :ea#1ywr«*  Ipr 
to  tHe  Hotter  Ciecuttre 

4 2,2  I t at 1 1«|  Coaf tyorat toe 

Th*  noafna*  o**1y*ra*fee  of  ***  ! DAffS t OfP  toftaire  It  feplctef  ta  Hy*r*  t 
The  three  larye  bloOt  repretea*  *e  «*aoy>  pf  tHe  throoyHpot  aa*  «****»  ttoraye 
opacity  of  the  three  alttloe  I oapaten  Thtt  ft  iuMhtfrf  ‘aot  fra**  to  ttile 
Into  the  InOuiOait  pro.  ettor  copoctty  «tey  by  the  Hatter.  flatter,  §nt  lota 
leeiotfret  OfP  A po  ft  4*  Ua  , ta  each  pro.  ettor  or  It*  of  >il  a CMomlattve 
re  »r<j  of  crea  lap«it  to  the  toatrolt  MbtyUH  (e  y , Hatter  atde  latt  te'ecteA). 
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(b)  SvfeijrUN  SUtut  Tablet.  (c)  c#au1attve  intern  r««!u  of  app  I Icattont 
calculationt  (e.y  . pretent  00*1  fit  io**  petition.  (d)  to*  minimm  tet  of  appl  * - 
cot  loot  tatkt  tOot  are  ■11%  loo  critic*)  or  tOat  provide  ettentlil  iHpla* 
information.  ani  (e)  onr-crltlcal  atull*  appllcatlont  Uilt 


Too  Hotter  taecutl  ve  <N  Honltor  laeiuMve  tick  k< *t  a locally  r»%l4m*  top* 
of  to*  loti#  Hotter  Corfiyuratloo  Toilet  T0*te  toilet  include  all  toe  Tati 
Obtcrtptor  e*d  iota  letcrlptor  toil*  entrtet  toot  are  required  to  row  too  t retro 
In  tOo  tloflr  procettor.  lockup  Corf lyurat too  TOr  ca#eclt*  of  only  one  procet- 
tor  It  uted  for  lock**  Cooflfvrot ion  and  all  active  totkt  are  ce-ret»de*t  lo  a 
ttOfle  ■ ttlon  protetter  ftyure  M llttt  tOote  tatkt  toot  are  active  durtry 
lock#  Coof  I fwrot  loo  pro* et tiny  to  provide  uninterrupted  preheat  at  loo  of  nlttten 
critical  Information  to  toe  fllypt  erne  TOe  duration  of  lockup  tnnf lyurat loo 
procet tiny  It  ettlaeted  w#r  one  olnute  lecenfl duration  oil  I ret  to  re  ad 
Oitlooo*  opopility  depend  my  oo  toe  nunber  of  a*ailaOle  procettort)  uttoin 
toe  tiaa  duration  of  lekud  Coof 1 fur  at lo*  peecettlny 

I l.l  l fraotlt loo  to  lockup  fratettfM 

Toe  karllftftr  of  r*conf  lyurat  Ion  It  toe  reduction  of  orecettloy  froo  toe 
■ore#  I operational  tytten  to  a one  precettor  tytteo  lot*  toe  Hitter  procettor 
end  toe  goiter  procettor  are  tetked  vitk  tOe  Ortectlo**  of  precettor  w'functtont 
Toe  failure  no  dr  for  procettort  It  for  tor  errant  precettor  to  rate  < o— uni 
carton  •! t o tOe  but  !oe  Hatter  will  detect  fa* lure t of  ettoe*-  the  Hinltor  or 
•oaote  free et tor  and  toe  Ifcnitor  nllt  ietect  failure  of  t Or  Hatter  precettor 
ani  attoclatei  tciv  t TOe  fenltor  «H1  Oott  the  one -precettor  tytteo  and 
conduct  toe  recnnfiyeretlon  If  ettOer  toe  Hitter  or  •■note  procettort  Oave 
fallei  (n  toe  event  of  a Heritor  failure,  toe  Hatter  autt  attune  tOe 
#*  I procettor  conf lywratlon  ani  conduct  tOe  maf lyurotlon  proceiuret  *0e 
uni  procettor  conf lyurat ton  avtt  per  torn  dleynottlc  tettt  te  Pete  mine  oMc**  of 
tOe  I fMffV  cere  eleaentt  reaaln  operable  and  outt  continue  to  perfore  toe  coopu 
tatlpnail  and  explication  tatkt  attiyoed  to  It  it  toe  loopletton  of  toe  dlay- 
notlt  (lett  toan  »ne  olnute)  aod  upon  a tiynal  fren  toe  precettor  control  panel 
to  reconftyere.  toe  unlprecettor  ulll  beetn  the  jpeard  reconflyuratlon  If  tuc 
or  eere  procettort  are  able  to  function 
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4 2 2 } Tronsltion  4ro»  lockup  Processing  to  Reconfigured  VUt e 

Ar  orderly  transition  fro*  (lockup  Con  f 1 gura  1 1 ©e  processing  to  active  processing 
Of  the  reconfigured  Operational  flight  Program.  under  automatic  tontrol  of  the 
Mon ’ to r (aecutive  is  provided  in  IQAMS*  Aetonf iguration  software  wdu'r  loading 
and  state  transition  to  active  processing  occur*  without  interruption  of  the 
atsstOM-criticol  functions  Two  types  of  reconfigurat ion  car  occur  |f  the 
••ante  Processor  has  failed,  then  no  software  need  be  loaded  If  either  the 
flatter  or  Monitor  has  failed,  then  the  Remote  Processor  mutt  be  loaded  with 
a copy  of  the  failed  processor’s  software 

If  the  Remote  Protestor  fails  then  the  reconf i fwrat (on  sequence  is  as  follow* 
first,  the  Master  Protestor  detects  that  the  Remote  Processor  does  not  properly 
respond  to  comounicat ion  < oaaand*  Second,  the  Master  turn*  contro*  over  to 
the  Monitor  Processor  Third,  the  Monitor  Protestor  e*a*inei  the  IJTE  data  *rr* 
the  processors  and  IClU's  to  determine  the  cause  of  the  error  If  nr  error 
oan  be  surwlsed.  the  Remote  Processor  Software  is  reloaded  and  control  i: 
retw'ned  fro*  the  Monitor  to  the  Master  If  the  failure  is  onftrwed  ther  tne 
Master  is  sign*  ed  to  reduce  *he  tClU  coawa^d  list  wrssagn  list  to  a twc 
processor,  Master-Man  1 tor  enflguratten  and  to  se*  a syste*  flag  indicating  the* 
a two-processor  configuration  is  in  effect 

If  the  Master  Processor  falls,  ther  the  Peconfi  gur*t  lor  sequence  is  as  presented 
in  Figure  Ji  First  the  Mnritor  detects  that  it  has  received  no  ninor  cy  le 
update  for  twc  consecutive  wlnor  cycle  intervals  '1/3?  econo  Second,  the 
Monitor  sets  its  ICIU  to  waster  node  and  disables  the  Master  Processor  1CIU  from 
transwitting  in  the  waster  node  Third,  the  Monitor  Processor  begins  to  acti- 
vate tasks  starting  with  winor  cycle  *C  and  to  communicate  with  the  subsystem 
'onturrently,  the  Monitor  wust  conduct  diagnostic  tests  to  determine  the  opera 
tiona  state  ©f  the  data  < ownwnication  network  If  a pore*  down  conditior  is 
'o«nd  and  power  ha  , bee**  restored,  »he  Master  ^an  be  restarted  If  no  hardware 
w»lfur  tier  ar  be  detected.  Then  a software  error  will  be  assumed  ’he  soft- 
ware wi  be  loaded  and  verified  for  the  Master  Processor,  three  pro  esvor 
System  !*  a hardware  error  1 irdlcated,  fher  the  Remote  Processor  is  loaded 
with  the  twf  processor,  Ma  ,ter  Processor  conf igurat ion  and  the  Monitor  confi- 
gures its  software  to  r« n as  part  of  a two  processor  system  (without  tape  load 


ran 
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Demote')  fro*  the  fiilyr*  of  f,t»  Monitor  Pro  H very  itr  l*r  to  t*» 

recovery  fro*  th*  faster  Processor  fiilure  I c*e  be  leer  in-  f'»»r»  3? 


T he  Mister  cm  determine  tMt  the  Monitor  his  not  responded  to  owwnicittpn 
«un4'  The  Mister  oust  liter  the  ICIU  w*Mnd  list  to  e>  ad*  w*uri.  »*  tor 
-it*  the  other  t*c  processors  Fro*  this  point,  the  logic  o*  re.  on* < fur *• tor 
is  very  si*itir  to  tMt  of  Mister  Processor  fiilure,  is  cir  be  seer  by  owpiMnf 
Figures  31  ind  3? 

The  reconfi  furit  ior  procedures . ln:ludmg  the  toiding  *ro*  ntqne  tic  tip*  shou  d 
be  or  *hv  order  o*  If  seconds,  pri*iri1y  due  to  ♦he  si©*  speed  of  the  «igne*  it 
tip*  unit 

4 2 2 4 Ti*inf  ind  String  of  P*.  on *i fur it  ion  So*t*ir* 

Three  of  *h*  functions  supervised  by  the  re.  or  fi  fur  it  ion  so*t*ir*  ir*  lmge  y 
e«»*rni  to  The  processor  ir  which  it  reside  W e functions  ire  dugnosTt. 
testing  of  the  ftmnt*  Pressor  s . trmsfer  c * progrue  *ro*  Miss  *M*ory  *o 
demote  Processor  s . ind  v*rt*  irior  of  lpided  prog*-**.  Tnn s»er  o * peogrir 
♦ro*  Hiss  hMrry  md  v*ri*t Litton  Of  loided  progn*  require  .ever*  hundred 
*1  1 1 tsoconds  to  ict.0*(p  • *sh  Appro 1 1 m f e ' y fiur  per  en»  4 o * hu  tnnseii 

ion  eopicity  w'll  be  used  if  The  Miss  Mmm  y Tip*  Cisette  operated  it  ' 

m 1 1 rrjm  trmsfer  nte  ^r  eg  loidmg  o ♦ yrn^rm,  The  re  or*  gci^tion  i **rv 
is  only  pwriodltllly  ictivited.  to  determine  people  s of  th*  1»^din»,  operitlor 
end  to  sequen  e *he  *er*»nil-to-  emim'  s yn  hrpro us  hu  nes  iyr  required  t 
e*f*  t loiding 

* ? 2 S Auitliiry  Storig*  »*Ou'  red 

T he  entire  re  on* ♦ guiltier  iwd*  loid  *r du! es  for  three  torn,  md  one  pro  essor 
IperiMon*  FI  ght  Prygrie  « itiytlv  use  ifeou  ¥ *er’  * M*  it  Mpvnr, 

cartridge  tipr  This  figure  is  bited  o*  i recording  density  o*  1 60C  bits  per 
inch  with  *our  Si  * 4 tri  »s  ind  « fifty  per  *nt  $<  «T  tit  io«  The  tipe 
to  i 1«*  *8r  inter  record  gips  md  redwndl^  y ( he  t M *•!  l t *rs 
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"ii'v  tine  to  search  ’ape  *0 r the  requ'red  ploc»  *>f  da ta  to  be  read  would  be 
si*ty-s1*  seconds,  at  a tape  search  rate  of  twenty  inches  per  second  !t  Is 
-easonable.  bowerer,  prior  to  the  occurrence  of  r*(onf Iteration,  to  position 
the  ‘ape  at  the  section  of  data  for  the  ne*t  nost  probable  jorf iguratior  If 
the  s/ster  were  operating  or  three  processors,  it  s nos t probable  that  a re- 
snfiguratior  would  result  In  a two  processor  conf louratlon  “if*1  code  is 

dentlcal  regardless  of  'he  dertity  of  »he  'aTed  processor  Relatively 
shor».  processor-unique  taties  of  message  les  riptors.  rr  orded  on  ‘ape  are 
^equ  red  to  establish  the  failed  processor^!  ‘dentity  Search  tl»e*  for 
*hese  processor-unique  ‘ables  would  he  on  the  order  o*  > ne  naif  second,  aswaulno 
pre  position  ig  o*  the  Mass  Hewory  cassette  is  effective 


SECTION  V 


IDAWST  tfPTdARE  SPECIFICATION 

’he  principal  e«d  product  of  this  Qcryrm  was  to  produce  four  >o*9uter 
Program  Development  Specifications,  ’ype  15.  as  referenced  by  *11 -STD-49*), 
and  per  NIl-STD  4*3  end  Section  3.0  of  Append ii  H*  of  the  proqraw  state- 
ment of  wort  These  decumants  ere  referenced  below 

5.1  CtmjTTR  PtOGMW  OCVELO«*NT  SPECIFICATION  FOR  I OAKS’  DTP  ElECUTlVE 
(SB-4041 ) 

’his  docieeent  specifies  the  I0W6T  Operational  Flight  Rrooraw  OFF  E*ecut1ve 
software  The  IDAKST  Executive  Is  closely  patterned  after  the  DAIS  e»ec- 
utive  (lnternetrics  Specification  SA-201-30?)  with  the  following  changes 
of  significance.  An  interface  between  the  Applications  programs  and  the 
Master  Eiecutive  (via  the  Local  C*e*ut1ve)  has  been  defined  to  activate 
and  deactivate  coauwml*  ation  wi  th  devices  ’he  sa«e  interface  functions  will 
be  jsed  also  during  the  reconf ipuratlon  of  the  data  i onwjn feat  ions  elements 
Global  vnp  >1  def  Ini  tions  have  also  been  added  in  order  to  allow  the  Appli- 
cations software  were  efficient  operation.  Finally.  »he  BClU  - Master 
E*ecutive  interface  has  been  npanded  and  larified.  and  a BCIU  irter#ace 
faction  has  been  soeclfled 

-OPOP’JTI P PROGRAM  XVIL  *«FHT  SP£r IF ICATION  Ft*  IDA*ST  *EP  APEtlCA’' 
SOFTWARE  SB-404?) 

’his  do  ueent  specifies  the  'jAf*S’  OFP  Applications  software  ’be  OAI 
Appli  ations  softwa-e  architecture  «as  used  as  a basis  for  'levrlopinc  *br 
lOAf*^’  software  to  the  specific  requ  1 regents  of  the  AMS'  better  thar  M3 
o * the  *1*  Applications  so* ’ware  s reusable  *or  0AM<’  with  ttle  ir  no 
nodi f i ca* ion 

5 1 1HP1JTE.P  PNOGRAf*  OE¥EL  )PfbhT  SPECIFICATION  FOo  ITAKS’  OFP  ERKOR 
HANOI  IMG  AND  RECOVER''  WMARE  <-*-4043) 

’bis  don^*eni  specifies  the  JAfrv’  OFT  Error  Handling  and  Recovery  vof*a4re 
EH  AR*.  [ HART  as  an  entity  in  tself  is  not  totallv  definable  As  a result, 

the  njiter  of  dentified  software  nodules  *o r "0*pe;’  >s  relatively  sna? 

What  th‘s  do  unert  spe.ifies  are  reguirenents  to  be  imposed  on  the  E*e»utive 
and  AppMcations  software  tc  nr  »rpcr#te  f.HA*S  features  into  their  design 
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5 4 tXWPUTt*  tHOGA t*  KlfUOHClIT  S«ClflCATI(m  fO*  IMMST  OWWTIOItfi. 

nsT  pmcMtm  foi?) 

This  *(«r  t specifies  the  I MUST  OTh  It  covers  both  the  Ground  Test 
Pvograu  -I  (6TP-1)  and  Ground  Test  hrogran  . 2 f CTr-2) . CTh-1  is  relatively 
straight-forward  to  define  because  it  is  Halted  to  IDMST  core  elements 
< processors , bus.  »T's  etc  ) and  the  control  and  display  hardware.  This 
core  hardware  is  by  nature  highly  adaptable  to  self-test  and  diagnostic 
&P-2  on  the  other  hand,  is  far  less  adaptable  to  automatic  testing  in  a 
ground  test  env  1 ronaent  f or  this  reason.  6Th-2  *eguires  further  study 

than  tine  would  allow,  E» pans  Ion  of  the  lITt  capability  of  sowe  tews 
of  avionics  hardware  nay  be  necessary  Another  alternative  is  to  thoroughly 
investigate  airtome  testingof  the  avioi  ics  equipment  in  an  operational  environ* 
went  that  cannot  be  duplicated  on  the  ground  without  e* tens  1 ve  AGl  and 
considerable  tlut 
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pmmm  cewctwiows 

Althouyh  the  >pe<  of  I DAWS'  wff.wrt  Mi  the  result  of  tMs  proyra* 

•any  aspects  of  the  overall  avionics  system  desiyn  were  investiya'ed  in  order 

to  ettibliii'  the  software  rrojlMowti  A*  a w«lt  of  t hese 

end  the  vo ft »ire  spec  1 f ication  process  itself,  doth  yeneral  and  specific 

coot «1  s ions  end  oments  can  be  node  about  the  IMWST  sjrster  desiyn  The 

yeneral  wmtr ts  are  as  follows 

a 'he  DAWS’  baseline  design  will  satisfy  the  AWST  iper*tional 
requirements. 

b 'he  proposed  duel  red^dont  processing  of  ninioue  Mission  essential 
functions  with  a third  processor  as  backup  provides  an  acceptable 
level  of  Mission  reliability  for  the  AWST 
c.  The  DAIS  systew  architecture  used  as  a basis  for  the  I DAW* ’ 

systeu  desiyn  provides  an  eicellent  point  to  initiate  the  desiyn 
of  an  inteyrated  diyital  avionics  Systeu 

Specific  conclusions  and  i OMuents  vf  II  be  discussed  in  Paraqrap*  f 2 

A I GfKRAt  mr  IfSiOAS  A*0  tWPIA'S 

6 1 1 IDAWST  As  An  AWS1  Avionics  Systew  Candidate 

The  I DAWS  T desiyn  Mill  satisfy  the  AWST  operational  requirewents  The  hardware 
and  software  desiyn  satisfies  the  Minima  Mission  essential  re^virvoents,  pro 
vides  yrowth  and  systew  aonitoriny  features  that  uill  facilitate  operation  of 
the  AWST  with  a two  aan  crew  However,  the  fundaaenta!  questions  that 
inaediately  arise  are 

a Is  the  IDAWST  confiyuration  required  for  an  AWST  operated  by  a 
two  aan  crew? 

b If  not  required,  what  is? 

In  the  course  of  the  systea  analysis  which  was  performed  duriny  this  proyrao. 
it  was  apparent  that  soae  deyree  of  inteyration  would  be  necessary  to  support 
performance  requirements  as  well  as  a two  an  crew  The  need  for  processiny 
capability,  especially  in  the  naviyation  systew  is  a requirement  Also  air 
Sata  coaputations . systew  weniteriny  functions  and  the  onsideration  of  auto* 
^mtic  test  capability  require  on-hoard  processiny 
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Thp*e  iawvdlate  ouplod  with  future  requirements  such  as  W* 

end  JTIDS  *11  strongly  dictate  the  intelligence  of  an  integrated  system 
design  0 mt  el  ewe nt  of  such  * design  Is  the  efficient  transmission  ®f  data 

between  sensOM.  processors.  and  crew  control  (ml  display  A tomunlratlan 
network  {per  MIL>STD>1SSIA)  ^ilch  pro* «6*s  such  * neons  of  efficent  deta 
transmission  «lth  growth  capability  Is  necessary  The  Ijdd*ST  baseline  design 
util  lies  Wiltlple  processor*,  o date  transmission  network  one  integrates  *he 
essential  function  of  navigation,  comm*  teat  Ion.  one  system  nonitoring,  hence 
the  question  Is  whether  l CARS'  Is  the  ootmw*  design 

Austerity  of  cost  1c  procurement  Is  the  strong  factor  that  tenner*  the  offeree 
advantages  of  a JAIS  “Hie  design  approach  to  the  AR$T  At  present,  life 
cycle  cost  (ICC)  counter  erg tponnts  *ce  not  of  sufficient  tangibility  to  ©f'se* 
the  soector  of  initial  procurement  cost  by  reduced  operational  costs  Usmo 
procurement  cost  austerity  *n<J  a definition  of  minime*  essential  niSSlon 
apablllty  as  key  evaluation  factors  for  I'M**’,  it  would  appear  that  IDA*? 
not  the  optima*  design  almost  by  definition  It  Is  a system  that  Is  <n»*  a y 
more  eipenslve  and  provides  wore  than  the  nlsslon  es*e*t**l  *po'iil»t> 

If  IJAf*sc  Is  no*  optlnce*.  then  »ha*  deslqr  is?  As  a pur»Iv  subjective  n-v-er* 
trow  this  study  It  Is  strongly  felt  *hat  a design  ' not  has  Multiple  processors, 
an  Integrated  data  nwunii  *ti©r  network  bus  structure)  and  integrated  entro’ 
*n  display*  s req  red  ljAft<T,  as  an  avionics  system  ?ype  s**i*fie<  ♦» 

criteria  gua 1 1 tat fvel v with  only  the  oues*1on  of  de»*1l  !ef*  open  To  he 
specific  How  *uch  Integration  Is  necessary*  Mow  e*te**sivn  Is  the  use  of 
C*T  type  displays'1  vfha*  processor  apablllty  and  hew  many  **e  required 
The  questions  suggest  *hr  final  omen*  Studies  that  rema’n  car  he  y(rn  tn* 
towards  detailed  analysis  Intended  to  answer  *he  nmedlatflv  preceding  questions 
by  us'ng  ! JARS'*  as  *he  point  ©f  departure 

i 1 2 Dual  »edund*nt  Processing  *© r lOPP** 

A dual  re?  rjmt  prOceSSIfig  Oesijr  was  configured  for  IDAI*  ’’  nn  processor 
IS  designated  as  a pilot  s processor  td-lle  *he  #thnr  *he  copilot  s Remind  an* 

and  a • ve  software  is  pro*  «nd  ir  each  pf  *he*e  wponnnt* 
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Function*)  separation  Is  maintain#*  between  the  1 1 lot  and  copilot  controls 
and  displays  through  the  processors  out  to  r«ound*nt  sensors  vdsee  r*»Jund*nt 
hardware  Is  se  provided  failure  of  either  processor  will  net  reduce  to* 
a i maun  mission  essential  capability  hut  will  void  function*!  separation 
’he  third  processor  will,  if  allowed  by  the  crew,  reconfigure  and  restore 
Functional  redundancy  and  separation  This  design  is  felt  to  be  conservat  vr 

and  as  a result  require  none  processor  capability  and  potentially  a higher 
degree  of  bus  traffic  than  other  conf i durations  ’he  approach  is  re  c'  the 
significant  departures  from  the  DAIS  software  conf iguration  however,  «t  s 
this  conservative  approach  that  simplifies  reconf iguration.  and  is  felt  to 
be  a step  towards  desceelng  the  IDAMST  system  design  to  a wore  austere  design 
Also,  it  is  felt  that  the  requirement  for  three  mission  processors  is  put 
into  proper  prospective  from  a mission  reliability  viewpoint  It  nay  be 
argued  that  perhaps  only  two  processors  would  suffice.  however,  this  argument 
can  be  countered  if  the  third  processor  is  specified  as  a test  processor  for 
automatic  test  support  In  the  proposed  IIW»S’  three  processor  conf  iguration. 
the  aircraft  systems  monitoring  capability  is  in  essence  a prereou*site  to  a 
test  omputer  That  it  can  also  be  used  as  a backup  mission  processor  im- 
proves the  wission  reliability 

4 1 3 DAIS  Architecture  As  Applied  tc  the  AKST 

The  DAIS  architecture  Including  the  structured  approach  to  the  software  design 
proved  to  be  readily  adaptable  to  the  Af*ST  w*en  <-ons1dering  an  integrated 
digital  avionics  design  As  a model  HAIS  served  Its  purpose  well  by  providing 

a point  of  reference  to  trade  oo  or  down  It  was  definitely  felt  that  some 
features  of  the  MIS  software  design  while  providing  f1e*ibility  also  levied 
high  penalties  in  terms  of  eiuessive  throughput  overhead  burdens  and  memory 
requirements  However,  the  point  to  be  no  ted  is  not  the  ineff iclenc ies,  but 
the  relative  ease  of  reducing  the  inefficiencies  'or  < specific  application 
'his  was  done  for  the  IDAAfS’  design  without  destroying  the  basic  DAIS  desigr 
integrity  Spot  1 float  ion  of  '0Af»V  software  was  accomplished  in  nanv  cases 
where  <o«nonelity  of  functions  mvistod  between  DAIS  ana  IDAPtS’  by  adapting  the 
1A IS  spot  if ication  Certainly  at  the  8S  software  specification  level  a high 
legree  of  reusable  software  definition  through  the  media  ©f  documentation  does 
e«1st  It  is  felt  that  regardless  of  the  fin*'  software  code  implementation. 
DAIS  as  a mode'  for  software  specification  o'  an  integrated  digital  avionics 
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PetlpM  ce"  be  oted  to  fltMlUU  the  to *fwrt  spec  tftcotlon  process 
TMt  It  etpetlolljr  rjt  if  the  tK  Iflcetlon  con  be  wotntolned  1 r t « jmmcr 
h1**r  or#*  Ie«fw0f*  throufh  profrettlv*  Teeelt  Of  detell  BewtOblf  toft 
Mr®  i*  fhe  Object  i 04*  l*v«l  ft  not  « object f»e.  ho«e»er,  routoble 

to f too r*  Ot  tfc*  Oocoooototfoo  lotel  ft  obtelneble 

6 I 4 0*» lot  loot  from  MIS 

1MMST  itt«H  the  MIS  orcMtoctwre  tn»p*  for  ff»e  netoble  e»tep*1ons  which 
m Boefnq  Innototions  *nd  «re  not  necesserllp  In  lynwr’  with  the  Of*t 
b« t* lint  Ottffr  These  Chon  pet  were  dlctofed  both  bjr  ©«r  »**«ot  to  bet* 

SOtltf/  BUST  re*w1re«eMtS  * nd  bp  fncreosed  foelllerit/  with  the  MIS  OfThf  *ectt»re 
The  Mry  of  *V  rooaonolltp  of  the  softwore  between  MIS  ond  l MRS*  It 
present *4  In  Ftfure  31 

4.1,4  I Hir'tOf  frocMiOr 

Tnt  oott  obv loot  Cbonft  to  tnt  MIS  prchltecture  It  the  use  of  *he  Monitor 
processor  In  1MWST  MIS  uses  the  nonftor  prvcmor  <t  i pottlte  bo  kup 
de»  Ice  which  contolnt  the  mIMmoI  'unctions  to  support  « Mttlon  «nd  to 
topper*  recenfl furot Ion  The  nonftor  processor  In  (MRS*  It  on  ortlre  pro- 
poster  •Men  contolnt  o sot  of  soft »*rt  'hot  Is  olwott  duplfeote  to  the 
^•sttr  processor,  offering  o du*1  redundont,  pro  ettlnq  opoHllty  The 
Mister  processor  responds  to  * Nr  pilot  S CootnonOs  while  * he  noniter  pro 
Ctssor  responds  to  the  copilot  S < o*NMt  end  provides  tnt  ectlve  redjnd*n  , 
opponent  In  the  pilot  end  copilot  A dupllcete  conf tfureter  resides  In 
e#ch  protester  which  ontrplt  tnt  processing  o tl»1tjr  reletlre  to  *nt  In 
divldue*  pi  lot/copl let  requests.  These  ce«f  1 pure  tors  oust  sjrnchrcMxe  r 
•«f  shored  functions  In  tnt  rfnrte  processor,  since  these  functions  «w  • be 
considered  os  o shored  re«o*e  resource 

Since  either  the  wester  or  Monitor  It  copoble  of  Mpletln^  o eli  foe, 
reton  flforot  Ion  onslsts  of  reloedlnq  the  SjrSten  SO  the*  • Mister  end 
•onltor  ore  otolloble  If  too  protestors  ore  operotlonol,  end  either  o 
■otter  or  o Monitor  If  pnl/  one  processor  Is  operotlono’ 

*>  1.4  fiponded  *ll-ST0-1  SS 3 dltn  Broodcesf  ft  eprion  CepeMlltfr 

The  UAPfST  t/tte*  expended  the  defined  perforwonce  of  o ■ h - S 14- 1 S4  3 dote 
OMMyn 1 otlon  network  to  provide  t non  responding  *roedci  * re  ept  on  'I  fe* 
ipeblllt/  *he  ectlve  redunden*  processing  In  | ;4ff  T require  dwplltete 
Inforwetlpn  ff«e  sensors  to  be  posted  to  the  MO. ter  * nd  *he  nr»nf*©r  pro  # s«>r 
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ditnout  tbe  ^.epebi’Uv  to  listen,  bus  traffic  l>*vfW  .me  ep’ebly  nif* 
beteuse  of  tbe  lerfe  * mt*r  of  duplicete  ©esse  pel 

Tnis  t»Mr  Jf‘  broodiest  eepebility  does  not  <onf?ict  with  ».ne  requirements 
Of  tbe  WIl-STO  Tbe  iM»d  performance  is  limited  to  tbe  intelligent  devices 

• 0AP4ST  Billion  IClth)  Tbe  ICItfS  will  V-  Or  end  Store  in  t be 

P'KfUtr'i  memory  4II  nmif*’,  ©n  tbe  bu  l4frm»d  to  4 *f>fird 

set  of  eddreivees  dber  opereting  in  'M«  node,  t ne  Kills  mefntein  *11 
normu 1 error  detection  with  Tbe  exception  ©f  * tetos  word  response  e*  tbe 
♦«d  of  4 wttift  iltb  e lHt»f  iMr»n, 

6.1  4.3  levels  of  Control 

T **■  OAIS  ert  b i tec  turf  provides  4 SOpbi  It  ♦ C4ted  mecbjnis*  Of  Mff4r  blel 
control.  In  ■Men  »ecb  tes*  bes  4 controller  tes*  Tbe  terwinetion  of  4 
ontrollnr  terwlnetes  4 1 1 of  its  controlled  '44*4  DAI*>!.  PBC4t4«e  »f  1t4 

Simplified  ert  Mtf 'lure.  needs  Only  onyroller  t4S»S.  nene!y  » ne  COMigurj 

tor4  In  t*e  mester  end  Monitor  processors  TM4  single  level  of  ontrol  do  nr 

not  require  'V  sopM 4t  iceted  me  berisms  of  termlnetier  end  jen e<  ©gy 
iceileklc  under  DAI S 

6 1.4  « Device  Control 

DAIS  doe  no*  provide  *n»  *e  beniy*  to  terminete  ©mmun 1 t. 4 t i ©*  wit*  4 devi  » 

•nice  H44  Celled  or  wMc*  li  not  required  rf^'le  I0A»»  * irr  bronou  ft 
©•mu© icetes  wit*  ill  *f  k 1 4 devices,  error  processing  di-  tete  'net  4 lev  in 
remote  vermin*  1 li  mI  funt  tioning  end  report  ing  *n»  error  over  tbe 

tus  be  eble  to  be  removed  iron  tne  bus  ommunicetion  list  ioilerly.  if  t>, 

A *4  l f i*rx  t i©ns  4 *e;nenl4i»  <4  required  to  berge  t he  com»unicet  ior  "ill  » 
communicete  over  b«*  I It  is  1I10  desireble  to  be  eb  e to  engage  4*d 
disenguge  Sign  commonicetion  (low  use  *req<#en  y device  uC b 4 tne 
I •**  end  «CU  i*  bus  loeding  bet  ones  eveessive  EQUIPS  vbkt  de’e  t error 
ondi t ion  through  ilTf  end  out -of-t©lerenr  e lete  bould  4 4©  be  eble  to 
report  errors  (indirectly  to  tbe  evecutive  so  t©et  ( smmunueften  with  *nese 
■devices  cen  be  termineted  ellowtng  4 redvn dent  non-i  omnun‘ cet  ing  becl-up 
device  to  be  ectiveted 
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Display  Functions 


0*1S  provides  OISF  UiH  *iiCh  correspond  to  individual  display  variables 
Sovause  01  t ho  evetutlve  Overhead  involved  in  the  support  0*  tasls.  IB*#*’ 
grouped  <11  display  varieties  Correspond  109  to  a particular  display  device 
Into  a single  Dl$F.  reducing  the  potential  tne-der  of  9lS#s  from  ?fO  to  IP. 
which  car  be  seer  1r  tJf>je  |.f 

fe  2 SPECIFIC  COhtUrtlOhft  MO  CPW1TS 

'he  following  conclusions  and  consents  are  directed  at  specific  tas»s  or 
items  encountered  during  this  proorar 

a Use  of  functional  sequence  diagrams  (FSOs)  as  a systematic 
technique  for  yielding  software  requirements  within  a 9*IS 
'lile1  baseline  Is  mechanically  a tedious  process  It  was 
observed  that  the  analyst  tended  to  become  absorbed  In  the 
we«h*nlsr  pi  drafting  the  FSps  a*  the  e»perse  e 4 efficiently 
conveying  specific  software  requirements  to  the  software 
engineer  The  FSDs  in  themselves  are  not  a*-  e# f ’ lent  nedla 
for  transmission  e*  software  requirements  'he  MIS  str^  tjr 
ing  for  hardware  ahd  software  e» teryle^  to  the  s*'j>  *jnn,  o4 
software  fjnitiona  requirements  suggests  ’har  pgrhep  »he 
process  can  be  *e;11iteted  mm  rhantca  I ly  through  a he**er  grjpn 
i co 1 or  perhaps  a omputer  based  language  'hr  difficulties 
ercoumtered  Suggest  a better  »e  hnioue  .ho-jlr*  to  searched  4 p. 

t Considerable  additional  mri  >-*-»* ins  t<  *e  do»*e  In  the  area  0# 
ope  atlonal  test  software,  specif ical  v urownd  ’es'  Frogr*« 
'(GTF-?’  fhe  absence  of  sophisticated  fITf  apaMlity  1r 
some  current  hardware  and  the  orstrjint  o*  4 ground  re  * 
en» t rtwer • for  testing  ca»st  significant  1 imitations  to  the 
potentia  effectiveness  o*  6TF*i  *r  equivalent  autamat  tes* 
apaM  t>  entspara4  le  to  G’f"-  for  ore  hardware  4 or  ' **■  avion 
hardware  should  be  ar  objective  *ne  possible  suggestion  is 
that  G’l  be  e»tenden  to  ar  airborne  test  apatil'tv  and  **+ 
benefits  o4  ar  operation  environment  y*  used  to  svstenat<  a > 
test  »he  avionic  Systems  and  perhaps  tne  air  raft.  svs»em«  ir 
general  ’he  pra  tiiality  of  this  suggestion  need’s  to  be 

invest igated 

RJ 


C Analysis  of  the  IDAHST  system  baseline  and  consideration  o4  a 
■Inlmal  capability  vjq^us  that  the  sophistication  of  the  data 
coawunlcatlons  network  letter  could  be  •’educed  tc  reduce  cost  and 
still  rot  qreatlv  knnatt  system  capability 

d The  Softmre  Manag^nent  Rian  originally  provided  by  apoeed*«  H 
e 4 the  state***’  gf  *prk  provides  a 4ounAsiior  for  developing 
ar  IQAHV  Software  Hanagemert  Rla*  A n^ber  of  nodtf icatlons 
tt  this  plar  hive  beer  Incorporated  and  are  contained  within  the 
flna’  submitted  Software  Hanaoenen*  Rian  ’hese  changes  are 
consistent  with  owents  nade  in  the  Inter le  Technical  Report 
Ar  alternate  approach  was  also  briefly  outlined  In  the  lnterle 
Report,  but  discarded  because  o 4 the  magnitude  o 4 effort  required 
tr  accomplish  the  task  Th1s  task  would  have  dearly  detracted 
*rgr  nther  program  tasks,  however,  the  we t r s pertaining  to 
the  alternate  plan  still  are  applicable  These  t owents  have 
heer  e*cerpted  from  the  lnterle  Technical  Report  and  placed  1r 
Append  1 1 C e4  the  report 
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